ClawHub
Back to skill

Security audit

Content Ideas

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent content-idea generator, but it includes recurring cron-style workflows that can keep running and writing files after the initial request without clear opt-in, expiry, or removal instructions.

Install only if you want an agent to help produce recurring content ideas. Before enabling the daily or weekly workflow, confirm the exact schedule, timezone, output directory, data sources, and how to list and remove the scheduled job later.

A.I.G

Vulnerability Patterns
  • System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T06 · System Persistence

Error
Location
SKILL.md:102
Finding

Recurring Scheduled Tasks Create Cross-Session Persistence

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

The skill explicitly instructs the agent to set up scheduled tasks that automatically save generated files to disk, but it does not mention any requirement for user confirmation, opt-in, or limits on where data is written. Even though the output is only content ideas, silent recurring file creation can lead to unexpected persistence, clutter, or storage of derived data without the user's awareness.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.