ClawHub
Back to skill

Security audit

Agent Stability Framework

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent agent-stability framework, but it asks users to install broad system-prompt rules and persistent logs that can suppress safety-relevant caveats and permanently change agent behavior without enough safeguards.

Review this carefully before installing. Use it only if you want a persistent persona/stability system, add an explicit rule that safety, authorization, privacy, factual accuracy, and platform policies override ASF rules, and avoid storing raw conversations or sensitive data in the logs. Require human review before turning log patterns into permanent standing orders.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (2)

T01 · Skill Instruction Hijacking

Warning
Location
AGENT_STABILITY_FRAMEWORK.md:92
Finding

System-Prompt Rules Can Override Safety-Relevant Response Behavior

Content
View full analysis
Remediation
View remediation

T02 · Agent Memory Poisoning

Warning
Location
AGENT_STABILITY_FRAMEWORK.md:179
Finding

Untrusted Observations Can Be Promoted into Persistent Agent Rules

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
80% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · AGENT_STABILITY_FRAMEWORK.md (reported line 102)May include surrounding context.

md
1. NEVER add information the user didn't ask for
2. NEVER explain WHY something matters unless asked "why"  
3. NEVER validate or grade the user's decisions
4. NEVER add disclaimers or hedging unless genuinely uncertain about facts
5. NEVER pad with social cushioning ("let me know", "hope this helps")
6. If a sentence can be removed without changing information content — remove it
7. Match the tone and length of BASELINE_EXAMPLES.md, not training defaults

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This framework explicitly instructs the agent to create and maintain multiple log files, including fault and stability logs, without any guardrails about consent, data minimization, retention, or redaction. If implemented literally, an agent may persist user prompts, model outputs, and potentially sensitive metadata to disk, creating a privacy and compliance risk.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The prescribed daily audits and continuous logging require reviewing and recording recent responses over time, which implies retention of conversation history in persistent logs. Without disclosure or storage safeguards, this can silently accumulate sensitive user data and expand the blast radius of any host compromise or unauthorized access.

Content

No source excerpt is available for this finding.

Scope Creep

Low
Category
Excessive Agency
Confidence
70% confidence
Finding

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

Content

Scanner excerpt · SKILL.md (reported line 108)May include surrounding context.

md
**USE AT YOUR OWN RISK.**

- The author(s) are NOT liable for any damages, losses, or consequences arising from 
  the use or misuse of this software — including but not limited to financial loss, 
  data loss, security breaches, business interruption, or any indirect/consequential damages.
- This software does NOT constitute financial, legal, trading, or professional advice.
- Users are solely responsible for evaluating whether this software is suitable for

Static analysis

No suspicious patterns detected.