ClawHub
Back to skill

Security audit

Cn Ppt Outline

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently generates Chinese PPT outlines and optional presentation files, with no evidence of hidden network, credential, persistence, or destructive behavior.

Install only if a Chinese-language PPT outline generator fits your workflow. When exporting files, provide an output path in your workspace and avoid names that could overwrite important files.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tp2

High
Category
MCP Tool Poisoning
Confidence
85% confidence
Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Lp3

Medium
Category
MCP Least Privilege
Confidence
78% confidence
Finding
The skill advertises file-generation capability ('直接生成.pptx文件' and example output paths) but does not declare any explicit tool scope such as allowed file-write permissions. This creates a trust and containment gap: an agent or runner may permit broader filesystem writes than users expect, increasing the risk of unintended overwrites or writing sensitive locations if the implementation is unsafe.

Natural-Language Policy Violations

Medium
Confidence
90% confidence
Finding
The skill name, headings, usage examples, and output examples are entirely presented in Chinese, with no indication that users can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy criteria, imposing a specific language without opt-in or clear justification is a natural-language policy violation.

Static analysis

No suspicious patterns detected.