ClawHub
Back to skill

Security audit

Mini Coder Max

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed coding-workflow skill with no bundled executable code or hidden persistence, though its activation keywords are broad.

Before installing, be aware that this skill may activate for broad words like create or fix; use it when you want coding help, and review any proposed code or web-researched dependency choice before allowing changes.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The trigger keywords are extremely broad ('code, build, implement, create, develop, fix, refactor, architect') and overlap with many ordinary requests, making the skill likely to activate in contexts where the user did not intend to invoke an autonomous coding workflow. Over-broad activation increases the chance of unintended tool use, unnecessary autonomy, and expansion into research or implementation behaviors that may exceed user expectations or policy boundaries.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The manifest describes an autonomous coding agent focused on planning, implementing, reviewing, and delivering code, but does not explicitly mention browsing, fetching external content, or evaluating external sources. The SKILL instructions add a distinct research capability using web search and fetch tools, which is not necessarily required for every coding task and expands the skill beyond the manifest’s stated scope.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.