ClawHub
Back to skill

Security audit

Oschina

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple instruction-only helper for summarizing public OSChina pages and does not request credentials, local data, installation scripts, or privileged access.

Safe to install for public OSChina research and summaries. Keep usage limited to public pages, avoid bulk scraping or API reverse engineering, and do not submit private or account-only content unless you intentionally choose to do so.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.