ClawHub
Back to skill

Security audit

Abby Watch

Security checks for vulnerabilities and agentic risk

Overview

This is a small time-display skill with no evidence of hidden access, persistence, network use, credential handling, or destructive behavior.

Before installing, be aware that some countdown and help text appears in Chinese and the countdown path may not work correctly; from a security perspective, the skill appears limited to displaying local time and does not request sensitive access.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Natural-Language Policy Violations

Low
Confidence
96% confidence
Finding
This markdown file includes a countdown example output of "⏰ 3小时后", which is Chinese, while the rest of the skill description is in English. Because the skill does not mention that output may be localized or give the user a language/locale choice, it suggests a language policy violation in the natural-language behavior.

Natural-Language Policy Violations

Low
Confidence
82% confidence
Finding
The countdown example is presented in Chinese ("3小时后") while the rest of the document is in English, which suggests the skill may emit a specific language variant without stating that this is optional or user-selected. The file does not indicate that users can choose their preferred output language or locale.

Natural-Language Policy Violations

Low
Confidence
93% confidence
Finding
The script includes Chinese help/output strings on L09-L10 and L25-L27, while also emitting English text on L08 and L29. This imposes mixed language behavior without any documented user opt-in or locale selection, which is a natural-language policy concern under the language/locale rule.

Static analysis

No suspicious patterns detected.