ClawHub
Back to skill

Security audit

Lab2startup Tech Market Fit

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only Chinese business strategy guide for technology-market fit and does not ask the agent to run code, access data, or use credentials.

Safe to install as a guidance-only skill. Consider narrowing its triggers if you want fewer accidental activations, and use it mainly for Chinese-language technology commercialization planning. Do not treat its examples or frameworks as current market proof; validate real business decisions with fresh market research and domain experts.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The trigger list contains broad, generic phrases such as '应用场景' and '转型策略' that can match ordinary business or educational conversations, causing the skill to activate outside its intended scope. Over-broad invocation increases the chance that this skill overrides a more appropriate skill or injects guidance into unrelated contexts, which is a prompt-routing and control-boundary weakness rather than a content safety issue.

Natural-Language Policy Violations

Medium
Confidence
80% confidence
Finding
The skill is written entirely in Chinese and instructs a fixed Chinese output format without offering a language-selection mechanism or documenting that the skill is only for Chinese-speaking users. In multilingual environments this can cause unintended behavior, user confusion, or policy bypass of system-level language preferences, though the security impact is limited compared with direct prompt injection or data exfiltration risks.

Static analysis

No suspicious patterns detected.