ClawHub
Back to skill

Security audit

PubMed临床医学文献检索系统

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent PubMed literature-search skill with no executable payload, persistence, credential handling, or hidden authority.

Install this only if you want a Chinese-language PubMed literature-search workflow. Expect it to use PubMed/NCBI queries and any JCR Excel file you provide; review medical outputs independently before relying on them.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 8)May include surrounding context.

md
---
AIGC:
    ContentProducer: Minimax Agent AI
    ContentPropagator: Minimax Agent AI
    Label: AIGC
    ProduceID: d0687d7718835bad5273d94957cb45ab
    PropagateID: d0687d7718835bad5273d94957cb45ab
    ReservedCode1: 3046022100a91358d8db1901c0f956669d53769a47ae26d72d3fc697668e073b85004f6a3f022100840ae22fb7c9d3084af81b50f218a3576d0614f8c00bf696d01dc7d69659efbe
    ReservedCode2: 304602210093143fc821eb73a3e432b7266a2d9a88bd074ee0f0421a3195e9a1c7a14ebdf2022100c66d747fe49345a76295f0d07c88a03b0aa09634beb3ff8850b035b0c30de595
description: 临床医学顶刊文献检索与分析。当用户要求检索医学文献、查找临床研究论文、搜索特定疾病或治疗方法相关文献、或者需要基于PubMed数据库进行系统文献综述时使用。支持JCR分区筛选、影响因子排序和综合相

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest description and document content are written entirely in Chinese and present the skill as operating in that language, with no indication that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.