ClawHub
Back to skill

Security audit

Exam Paper Error Analysis

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently helps analyze exam mistakes and generate local HTML reports, with no evidence of hidden network access, credential use, or destructive behavior.

Install this if you want a teacher-facing exam error analysis workflow. Before using it with real student work, choose an appropriate save location, avoid including unnecessary personal identifiers, and delete generated HTML reports when they are no longer needed.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs saving a generated HTML report to disk, including to the current working directory by default, without a clear consent, privacy, or data-retention warning. Because the content being processed is student exam data and potentially sensitive educational records, automatic local persistence increases the risk of unintended storage, later disclosure, or mishandling on shared systems.

Static analysis

No suspicious patterns detected.