Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md ClawHub API + GitHub `SKILL.md` 搜索
Security audit
Unified Search
Security checks for vulnerabilities and agentic risk
Overview
This is a simple search-helper skill that discloses its search sources and optional API keys, with no code execution, persistence, or hidden privileged behavior found.
Before installing, note that this skill is designed to send search queries to external providers such as Baidu, Brave, Tavily, DuckDuckGo, Google, and academic indexes. Only configure optional API keys if you trust those providers for your query content.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The manifest description is written as a Chinese-only capability statement centered on Chinese search sources and behavior, which can indicate a language/locale constraint without user opt-in. Under the policy, locale or language restrictions should either offer a user choice or be clearly justified as region-specific.
- Content