ClawHub
Back to skill

Security audit

Emoji Translator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local emoji translator with disclosed Python helper scripts and no evidence of network access, credential handling, persistence, or destructive behavior.

Installers should expect this skill to run a local Python script on text they ask to translate or decorate with emoji. Review the broad trigger phrases if precise routing matters, but no sensitive data access or high-impact authority was found.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · emoji-translator.skill!/emoji-translator/SKILL.md (reported line 3)May include surrounding context.

md
---
name: emoji-translator
description: 中英文↔emoji双向翻译器。把文字变成emoji，把emoji读回文字。支持400+emoji词库、幽默模式、关键词搜索、分类浏览。触发词：「翻译成emoji」「把这句话变成emoji」「emojify」「这段emoji是什么意思」「解读emoji」「用emoji表达」「emoji翻译」 | CN↔EN↔emoji bidirectional translator with smart inline embedding & meme mode. 400+ hand-annotated emoji lexicon. Triggers. "emojify" "translate to emoji" "what does this emoji mean"
---

# 🎭 Emoji Translator — 文字 ↔ Emoji 双向翻译

把任何文字变成

Concealed Executable Artifact

High
Category
Supply Chain
Confidence
100% confidence
Finding

An executable nested in a document or hidden/disguised artifact can evade ordinary extension-based review while still being available to the skill at runtime.

Content

No source excerpt is available for this finding.

Concealed Executable Artifact

High
Category
Supply Chain
Confidence
100% confidence
Finding

An executable nested in a document or hidden/disguised artifact can evade ordinary extension-based review while still being available to the skill at runtime.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The trigger list contains very broad natural-language phrases such as '用emoji表达' and '这段话加上emoji', which are common in ordinary conversation and can cause the skill to activate unintentionally outside explicit user intent. In an agent environment, overbroad triggers can hijack routing from other skills or fire on incidental text, leading to incorrect transformations of user content and reduced trust in the system.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.