ClawHub
Back to skill

Security audit

Landing Gen

Security checks for vulnerabilities and agentic risk

Overview

This skill generates landing-page copy and may create project page or markdown files, which matches its stated purpose.

Before using it, confirm the target output path, especially if your project already has src/pages/index.astro. The skill is suitable for drafting or scaffolding landing-page content, but review generated claims, social-proof placeholders, SEO tags, and any file changes before publishing.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill is explicitly designed to write or scaffold files such as src/pages/index.astro or docs/landing-content.md, but it does not require confirmation before modifying the workspace. In an agent setting, this can lead to unexpected file creation or overwriting when a user only intended content generation, especially because the skill description emphasizes generation and scaffolding without a safety checkpoint.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.