ClawHub
Back to skill

Security audit

Hellobike

Security checks for vulnerabilities and agentic risk

Overview

This is a simple instruction-only skill for summarizing public Hellobike service and announcement pages, with no account access or executable code.

Install only if you want help summarizing public Hellobike pages. Do not use it for account login, order management, ride operations, private user data, or bypassing platform restrictions.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.