ClawHub
Back to skill

Security audit

gate-info-marketoverview

Security checks for vulnerabilities and agentic risk

Overview

This skill provides a read-only crypto market overview using listed Gate Info and Gate News MCP tools, with no credential handling, persistence, or hidden execution.

Install this if you want an agent to generate read-only crypto market overview reports from Gate Info/Gate News MCP data. Confirm the Gate MCP server comes from a source you trust, and treat the output as market information rather than investment advice.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Unrestricted Tool Access

Medium
Category
Excessive Agency
Confidence
80% confidence
Finding

Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.

Content

Scanner excerpt · SKILL.md (reported line 16)May include surrounding context.

md
## General Rules

⚠️ STOP — You MUST read and strictly follow the shared runtime rules before proceeding.
Do NOT select or call any tool until all rules are read. These rules have the highest priority.
→ Read `./references/gate-runtime-rules.md`
→ Also read `./references/info-news-runtime-rules.md` for gate-info / gate-news shared rules (tool degradation, report standards, security, routing, and graceful fallback behavior).
- **Only call MCP tools explicitly listed in this skill.** Tools not documented here must NOT be called, even if they

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The trigger phrases are broad enough to match many generic market-related requests, which can cause this skill to activate when the user actually wants a different workflow, such as coin-specific analysis or risk review. In an agentic system, misrouting can suppress more appropriate safeguards, omit needed analysis dimensions, and produce incomplete or misleading outputs.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The scenario examples are ambiguous and do not clearly define when this skill should activate versus when a more specialized skill should be used. That ambiguity increases the chance of incorrect skill selection for multilingual or loosely phrased requests, leading to incomplete market responses or bypass of richer coin-analysis handling.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
71% confidence
Finding

The file declares a Chinese scenario but supplies English prompt examples and only says to return the report in natural language, without clearly offering or confirming the user's language preference. This can lead to inconsistent locale behavior and may effectively force or default to an unintended language without explicit user opt-in.

Content

No source excerpt is available for this finding.