ClawHub
Back to skill

Security audit

Farseek

Security checks for vulnerabilities and agentic risk

Overview

The skill is a straightforward job-search API description; it sends job-profile fields to Farseek as expected, with no hidden execution, persistence, or local privilege behavior.

Before using this skill, treat the skills, location, role, and title-history fields as information that will be sent to Farseek and processed for job matching. Avoid including sensitive employment details unless you are comfortable sharing them with that service.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill sends user-supplied job-search profile data such as skills, location, role, and title history to an external API, and the description states that Claude is used to expand and rank those inputs, but it does not warn users that their personal/professional data will leave the local environment. This creates a privacy and consent risk because users may disclose sensitive employment information without understanding that it will be processed by third-party services.

Content

No source excerpt is available for this finding.