ClawHub
Back to skill

Security audit

VDA6.3过程审核辅助

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese VDA 6.3 audit-assistance skill with no bundled executable code, hidden data access, persistence, or external calls; its main issues are broad activation wording and missing referenced resources.

Before installing, understand that this package is only a Markdown instruction file and does not include the scripts or reference materials it says it will use. It appears safe from a security standpoint, but users should expect incomplete functionality unless those referenced resources are supplied separately and reviewed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Tp2

High
Category
MCP Tool Poisoning
Confidence
85% confidence
Finding

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

L019-L022 将触发条件定义为“用户提到 VDA 6.3、过程审核、汽车行业标准”以及“需要审核准备、报告生成、自我评估”等宽泛场景，但未限定必须是该标准相关任务，也未提供排除条件。像“报告生成”“最佳实践”“自我评估”这类表述在许多非本技能场景中也常见，容易造成不必要的技能激活。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

L033-L039 规定“首次交互必须执行”，且示例开场白完全固定为中文，没有说明可根据用户语言偏好切换。该要求构成语言/locale 强制，缺少用户选择或显式限定为仅面向中文用户的说明。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

L095-L099 要求每次交互都以“通俗易懂的语言”解释，并结合全文中文示例与描述，实际呈现为默认固定中文交流风格。虽然该处主要规范表达方式，但未说明若用户使用其他语言时如何处理，存在轻度语言策略强制问题。

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.