ClawHub
Back to skill

Security audit

Repeated Games & Reputation

Security checks for vulnerabilities and agentic risk

Overview

This skill provides structured advice about trust and cooperation, with no evidence of hidden execution or excessive access.

Use this as a framework for thinking through relationships and reputation. Review recommendations before applying them, and avoid including confidential details in any saved failure examples.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Shadow Command Trigger

Medium
Category
Trigger Abuse
Confidence
70% confidence
Finding

Shadow Command Trigger: description clause 'a partner defected, how to design a reputation system, whether a long-term relationship can survive betrayal, or says 'shadow of the future / tit-for-tat / burn this bridge / they'll remember this / build credibility' conflicts with built-in command 'build'

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.

md
k. |
| [D] "Reputation will discipline them" | Only if the reputation system has all four pieces (observation, aggregation, persistence, manipulation resistance) and is actually consulted. Many "reputation matters" claims are wishful — the system is broken on one of the four pieces. |
| [D] Applying TFT in a noisy environment without forgiveness | Pure TFT under noise enters mutual-recrimination death spirals. If observation has error, use Generous TFT, Contrite TFT, or Pavlov. Recommending TFT without checking noise level is a documented failure. |
| [D] Using cooperation-by-default in a known finite-endpoint game | Backward induction: last round → defect dominates; second-to-last → both know this and defect; unraveling cascades to round one. Add uncertainty about endpoint or commitment devices. |
| [D] "Always-defect can't beat TFT, so cooperation is automatic" | Always-defect can't beat TFT head-to-head, but can dominate in a population without retaliators. Tournament context matter