ClawHub
Back to skill

Security audit

R Stats

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed R-based statistics helper with command use aligned to its purpose and no evidence of hidden or malicious behavior.

Install this only if you intend to run local R-based statistical analysis. Review any package-installation or setup step before allowing it, keep outputs in a project directory, and avoid pointing it at sensitive datasets unless you are comfortable with local R scripts reading them. Be aware that some referenced R helper scripts are not present in this package, so the skill may not work as documented.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (13)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger list is extremely broad, multilingual, and includes common terms like 'predict', 'regression', and 'statistics', which can cause the skill to activate in conversations that are not requesting this tool specifically. Unintended invocation increases the chance that the agent will steer benign discussion into dataset inspection or shell-backed analysis workflows, expanding attack surface and creating opportunities for unnecessary command execution.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly directs execution of shell commands and package-installation scripts ('bash ... doctor' and multiple install scripts) without any user-facing consent, safety notice, or restriction on when system changes are allowed. Even if intended for legitimate setup, this creates a real risk of unexpected code execution and environment modification, especially when combined with broad trigger conditions and user-supplied paths/specs.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 54)May include surrounding context.

text
"3rd","Female","Child","No"
"3rd","Female","Child","No"
"3rd","Female","Child","No"
"1st","Male","Adult","No"
"1st","Male","Adult","No"
"1st","Male","Adult","No"
"1st","Male","Adult","No"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 172)May include surrounding context.

text
"1st","Male","Adult","No"
"1st","Male","Adult","No"
"1st","Male","Adult","No"
"2nd","Male","Adult","No"
"2nd","Male","Adult","No"
"2nd","Male","Adult","No"
"2nd","Male","Adult","No"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 326)May include surrounding context.

text
"2nd","Male","Adult","No"
"2nd","Male","Adult","No"
"2nd","Male","Adult","No"
"3rd","Male","Adult","No"
"3rd","Male","Adult","No"
"3rd","Male","Adult","No"
"3rd","Male","Adult","No"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 713)May include surrounding context.

text
"3rd","Male","Adult","No"
"3rd","Male","Adult","No"
"3rd","Male","Adult","No"
"Crew","Male","Adult","No"
"Crew","Male","Adult","No"
"Crew","Male","Adult","No"
"Crew","Male","Adult","No"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 1400)May include surrounding context.

text
"2nd","Female","Adult","No"
"2nd","Female","Adult","No"
"2nd","Female","Adult","No"
"3rd","Female","Adult","No"
"3rd","Female","Adult","No"
"3rd","Female","Adult","No"
"3rd","Female","Adult","No"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 1620)May include surrounding context.

text
"2nd","Male","Adult","Yes"
"2nd","Male","Adult","Yes"
"2nd","Male","Adult","Yes"
"3rd","Male","Adult","Yes"
"3rd","Male","Adult","Yes"
"3rd","Male","Adult","Yes"
"3rd","Male","Adult","Yes"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 1695)May include surrounding context.

text
"3rd","Male","Adult","Yes"
"3rd","Male","Adult","Yes"
"3rd","Male","Adult","Yes"
"Crew","Male","Adult","Yes"
"Crew","Male","Adult","Yes"
"Crew","Male","Adult","Yes"
"Crew","Male","Adult","Yes"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 1887)May include surrounding context.

text
"Crew","Male","Adult","Yes"
"Crew","Male","Adult","Yes"
"Crew","Male","Adult","Yes"
"1st","Female","Adult","Yes"
"1st","Female","Adult","Yes"
"1st","Female","Adult","Yes"
"1st","Female","Adult","Yes"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 2027)May include surrounding context.

text
"1st","Female","Adult","Yes"
"1st","Female","Adult","Yes"
"1st","Female","Adult","Yes"
"2nd","Female","Adult","Yes"
"2nd","Female","Adult","Yes"
"2nd","Female","Adult","Yes"
"2nd","Female","Adult","Yes"

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
80% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · examples/data/titanic.csv (reported line 2107)May include surrounding context.

text
"2nd","Female","Adult","Yes"
"2nd","Female","Adult","Yes"
"2nd","Female","Adult","Yes"
"3rd","Female","Adult","Yes"
"3rd","Female","Adult","Yes"
"3rd","Female","Adult","Yes"
"3rd","Female","Adult","Yes"

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
7% confidence
Finding

This CSV file contains only tabular data values and no natural-language instructions, comments, or strings that force a language or locale. Because SQP-3 is limited to natural-language policy violations and none are present in the file content, this should not be treated as a real violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.