ClawHub
Back to skill

Security audit

一人公司创业准备评估

Security checks for vulnerabilities and agentic risk

Overview

This skill provides a Chinese startup-readiness checklist and simple local scoring script without hidden data access, persistence, network behavior, or destructive actions.

Before installing, users should understand that the skill may discuss employment boundaries, noncompete risk, startup finances, and resignation timing. Use ranges instead of exact sensitive amounts where possible, avoid sharing employer/customer names or full contract text, and treat legal, tax, IP, and noncompete questions as topics for qualified local professionals.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill instructs the agent to read a local reference file and copy a document asset, but it does not declare any explicit tool scope such as allowed files or permissions. This creates an authorization ambiguity where an agent implementation may grant broader file-read access than intended, increasing the risk of unintended local file exposure if the skill is invoked in a permissive environment.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The description contains broad trigger phrases like '创业准备检查', '能不能开始一人公司', and '是否该离职' without clear gating conditions, so the skill may activate in loosely related conversations. Overbroad activation can cause the agent to inappropriately steer users into this workflow, solicit sensitive business or financial details, or override a more suitable skill in contexts involving employment, contracts, or finances.

Natural-Language Policy Violations

Medium
Confidence
94% confidence
Finding
The natural-language instructions and user-facing description are fully Chinese, which effectively forces a specific language for interaction. There is no opt-in, alternative language option, or documented reason that the skill must be limited to Chinese users or contexts.

Natural-Language Policy Violations

Medium
Confidence
96% confidence
Finding
The script emits end-user-facing status text only in Chinese across multiple branches, with no option to select language and no indication that the skill is intentionally limited to a Chinese-speaking context. This creates a natural-language policy concern because it forces a specific locale on all users without opt-in.

Natural-Language Policy Violations

Low
Confidence
91% confidence
Finding
The file presents the skill name and description in Chinese while the default prompt is hard-coded in English. This can create a language/locale policy issue because the skill appears to force or assume a language mode without explicit user opt-in or a documented locale constraint.

Natural-Language Policy Violations

Low
Confidence
94% confidence
Finding
This markdown file contains natural-language content exclusively in Chinese and does not indicate that the skill is region-specific or that users may choose another language. Under the language/locale policy rule, forcing a specific language without opt-in can be a policy concern.

Static analysis

No suspicious patterns detected.