ClawHub
Back to skill

Security audit

Landing Page Copy Kit

Security checks for vulnerabilities and agentic risk

Overview

The skill is only a Markdown upsell page that advertises missing paid materials and directs users to off-platform payment channels.

Install only if you are comfortable with a mostly promotional Markdown skill. Do not assume the advertised templates, examples, or scripts are included, and avoid paying or downloading follow-up files through external channels unless you independently trust the seller.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

other

Warning
Location
SKILL.md:2
Finding
Misleading Package Claims and Unverified External Payment Solicitation<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md`, lines 2-52 **Vulnerability Type**: Deceptive external commercial solicitation **Risk Level**: Medium ### Evidence ```markdown description: "Write high-converting landing page copy with 9 full templates for SaaS, e-commerce, online courses, lead generation, webinars, free trials, consultations, product launches, and waitlists. 50+ headline formulas with swipe examples organized by industry. Copywriting frameworks: PAS, AIDA, 4U, FAB, Before-After-Bridge applied to landing pages. CTA optimization matrix with 30+ calls-to-action by conversion stage. Trust signal templates for testimonials, case studies, guarantees, and social proof. Objection handling library with 20+ common objections and responses. A/B testing guide for headlines, CTAs, and page layouts. Includes 3 real landing page examples and 3 Python scripts. For business owners, marketers, and entrepreneurs who need high-converting pages without hiring a copywriter." ``` ```markdown ## What You Get in the Pro Version The Pro version (available on Telegram: @Cofi_ClawSkill_Bot) includes everything above plus: - **9 full landing page templates** (SaaS, e-commerce, course, lead gen, webinar, free trial, consultation, product launch, waitlist) - **50+ headline formulas** with swipe examples by industry - **Copy frameworks** — PAS, AIDA, 4U, FAB, Before-After-Bridge applied to landing pages - **CTA optimization matrix** — 30+ CTAs by conversion stage - **Trust signal templates** — testimonials, case studies, guarantees, social proof - **Objection handling library** — 20+ common objections with responses - **A/B testing guide** — what to test, sample sizes, duration - **3 real examples** (SaaS landing page, course sales page, lead gen page) - **3 Python scripts** (headline generator, copy optimizer, CTA tester) - **18 files total** of ready-to-use content - **Lifetime access** — no subscriptions, no extra fees - **Instant delivery** — pay via ...[truncated 2857 chars]
Remediation
<![CDATA[ ## Remediation Suggestions 1. Remove Telegram, PayPal, and cryptocurrency payment solicitations from the skill artifact. 2. Make the metadata accurately describe only the files and capabilities included in the reviewed package. 3. Bundle every advertised template, example, and script before claiming that the package includes those resources. 4. Subject any bundled scripts to an independent security review before distribution. 5. If paid distribution is required, use a verified marketplace with seller identification, refund handling, artifact integrity checks, and a clearly documented fulfillment process. 6. Avoid directing users to execute or download unreviewed files received through messaging services. 7. Repair the YAML front matter by using one valid metadata block and properly encoding multiline values. 8. Add verifiable publisher information, licensing terms, support terms, and a clear distinction between free and paid contents. ]]>

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill's invocation guidance is broad and promotional, but it does not clearly define when the skill should or should not activate. In an agent setting, this can cause over-triggering on loosely related marketing or writing requests, leading the agent to inject paid-upgrade prompts, payment links, or irrelevant copywriting behavior into conversations where it was not explicitly requested.

Static analysis

No suspicious patterns detected.