ClawHub
Back to skill

Security audit

food label audit食品标签合规检查与案例PLUS

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent food-label compliance assistant, with ordinary privacy considerations because uploaded labels may be stored temporarily and processed by OCR or multimodal providers.

Use this skill only with labels you are comfortable sending to the configured OCR or multimodal model provider. Clean up ./tmp/ after reviews, and prefer a local or approved provider path for confidential packaging drafts, supplier data, or unpublished product formulations.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs saving uploaded label files locally and sending content to an OCR/model provider, but does not require explicit user notice or consent before external processing. Because food labels and PDFs may contain proprietary formulations, supplier data, or other sensitive business information, users could unknowingly expose confidential data to third-party services or retain it unnecessarily on disk.

Static analysis

No suspicious patterns detected.