ClawHub
Back to skill

Security audit

Ultrahuman Analytics

Security checks for vulnerabilities and agentic risk

Overview

The skill is a read-only Ultrahuman health-data analytics helper, with sensitive data use that is expected for its purpose but worth confirming before use.

Install only in an environment where ULTRAHUMAN_EMAIL points to your own Ultrahuman account, and confirm the email and date range before asking for reports if the workspace is shared or delegated. The skill will retrieve sensitive sleep, recovery, activity, and possibly glucose data from Ultrahuman.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill instructs the agent to use an email from ULTRAHUMAN_EMAIL or the user message to access highly sensitive health data, but it provides no user-facing privacy warning or explicit confirmation step before doing so. In this context, silent use of environment-provided identifiers can cause unintended access to personal biometric and glucose data, especially in shared, delegated, or misconfigured environments.

Static analysis

No suspicious patterns detected.