ClawHub
Back to skill

Security audit

Vercel Zero Explorer

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only educational guide for Vercel Zero with no executable behavior or privileged access.

Safe to install as a reference skill. Expect it to answer Vercel Zero questions; verify technical claims against current official sources before relying on examples, and avoid putting secrets into generated API examples.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger phrase "AI agent programming language" is broad enough to match many generic user requests unrelated to this specific skill, which can cause unintended invocation or routing collisions. In an agent ecosystem, overbroad triggers can hijack normal requests, leading to irrelevant guidance being surfaced and reducing trust in tool/skill selection.

Static analysis

No suspicious patterns detected.