ClawHub
Back to skill

Security audit

Move to China Living Guide

Security checks for vulnerabilities and agentic risk

Overview

This is a plain Markdown living guide for moving to China, with one privacy caution around its advice to store sensitive document copies in cloud storage.

Install is reasonable for general relocation guidance. Treat the emergency-document section carefully: store passports, permits, insurance records, and bank details only in encrypted storage or a trusted document vault, enable MFA, and avoid broad cloud sharing.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Anti-Refusal Statement

High
Category
Anti-Refusal
Content
**Entertainment:**
- Business dinners are relationship-building
- Toasting is important (ganbei = finish drink)
- Don't refuse food offered by host
- Karaoke (KTV) often follows dinner

## Family Life
Confidence
85% confidence
Finding
Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill recommends storing highly sensitive documents such as passports, residence permits, insurance records, and bank account information in cloud storage without any guidance on encryption, access controls, or provider trust. If followed as written, users could expose identity and financial data through account compromise, insecure sharing, or syncing to untrusted services.

Natural-Language Policy Violations

Low
Confidence
84% confidence
Finding
Line L068 says users should 'Learn basic Mandarin phrases,' which imposes a specific language preference in natural-language guidance. Under the policy, language constraints should either be optional or clearly framed as a user choice rather than a default requirement.

Static analysis

No suspicious patterns detected.