ClawHub
Back to skill

Security audit

cold-email

Security checks for vulnerabilities and agentic risk

Overview

This is a non-executable cold-email writing skill, but it includes guidance to make vendor outreach look internally originated, which deserves review before use.

Review and adjust the subject-line guidance before installing or using this skill. It is suitable for drafting concise cold outreach, but users should require transparent sender identity, avoid impersonation or implied internal affiliation, and ensure campaigns comply with applicable email and privacy rules.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
70% confidence
Finding

Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

Content

Scanner excerpt · references/frameworks.md (reported line 80)May include surrounding context.

md
**Structure:** Trigger/Pain → Solution hint → Binary CTA. 1–3 sentences, no intro.
**Best for:** High-velocity SDR teams. Mobile-optimized. Deliberately polarizing.

Spend max 1 minute on personalization. Use industry/persona-level signals. For top-tier prospects, quote their own words from interviews — they almost always respond.

## Vanilla Ice Cream (Lavender)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The guidance explicitly recommends subject lines that appear to come from a colleague rather than a vendor, which is a form of deceptive impersonation/camouflage designed to bypass a recipient's filtering judgment. In a cold-email skill, this is especially risky because the core use case is unsolicited outreach, so encouraging disguised identity cues can facilitate misleading commercial communications and trust manipulation at scale.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.