Security audit
Security checks for vulnerabilities and agentic risk
This skill is an advisory ClawHub growth and SEO guide with disclosed example code and no installed tools or automatic execution.
Before installing, understand that this is a strategy and template skill, not an automated optimizer. If you copy and run its example code, you are responsible for any third-party API requests, privacy exposure, package versions, and manual edits or social posts you make from its suggestions.
The document claims it does not execute code and then includes executable Python and shell snippets, creating a trust-boundary mismatch. Users or downstream systems may rely on the safety framing and underestimate the operational and privacy risks of copying those examples, especially where the snippets make network requests to third parties.
Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.
### 3. SEO Title & Description Optimizer
/ SEO标题与描述优化器
Rewrite skill titles and descriptions using proven SEO frameworks to maximize search visibility and click-through rate.
**Title Optimization Framework:**
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# [English Title] / [中文标题]
<!-- English (for international users - put FIRST) -->
> **English Description**: One powerful sentence describing the skill's core value.
> Built for [target user]. Solves [specific problem].
The workflow's 'Apply' step presents self-modifying actions against SKILL.md and README.md, which can be interpreted by agents or users as authorization to alter the skill's own files. Even though a later note narrows this to manual user action, the contradictory instruction increases the chance of unsafe autonomous behavior in wrappers that act on imperative workflow text.
↓ User confirms changes ↓ Apply: Update SKILL.md + README.md + tags + thumbnail prompts + changelog
> **执行边界提示**：上图中 "Apply" 一步指**用户确认后由用户自行完成的操作**。本技能只产出建议、报告与素材文案，不代用户修改任何技能文件、不代发任何内容。
The workflow says 'Apply: Update SKILL.md + README.md + tags + thumbnail prompts + changelog,' which conflicts with repeated statements that the skill never modifies files. Contradictory autonomy claims are dangerous because they can mislead operators, reviewers, or agent wrappers about whether the skill may perform self-modifying actions.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
def fetch_github_trending(lang: str = "python", limit: int = 10) -> list[dict]:
"""Fetch GitHub trending repositories."""
url = f"https://api.github.com/search/repositories"
params = {
"q": f"language:{lang}+created:>2025-01-01",
"sort": "stars", "order": "desc", "per_page": limit
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
The template comment explicitly says English should be put first for international users, which is a natural-language locale preference embedded in the skill guidance. Although later text softens this requirement elsewhere, this line itself presents a prescriptive language-order rule rather than offering a neutral choice at the point of use.
No suspicious patterns detected.