ClawHub
Back to skill

Security audit

japan fish recipe search

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local recipe-search helper for Cookpad Japan fish and seafood recipes, with no evidence of hidden access, persistence, network fetching, or unsafe behavior.

Install this if you want a local helper for Japanese Cookpad fish and seafood recipe lookup. Be aware that recipe titles are in Japanese, tags are in English, and the skill may activate for general fish or seafood recipe requests even when you did not explicitly ask for Cookpad Japan results.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The manifest says to use the skill when the user asks about "fish recipes, seafood dishes, Japanese fish cooking, or wants to find recipes by fish type, cooking method, or ingredient," which is a wide set of natural requests without clear boundaries or exclusions. It does not specify when this skill should be preferred over more general recipe or cooking skills, increasing the chance of unintended invocation.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The instruction "When the user asks about fish or seafood recipes, use the search script" is broad and lacks limiting context, such as whether it applies only to Japanese recipes or only to searches within the bundled Cookpad dataset. Without negative examples or explicit scope, ordinary food queries could trigger the skill too often.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This JSON dataset consistently presents titles in Japanese while many tags are in English, imposing a mixed language experience with no documented opt-in or locale selection. Under the language/locale policy, forcing a specific language presentation without user choice can be a natural-language policy concern even in data files.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The file presents itself as 'Japan Fish & Seafood Recipe Search' and states it searches Cookpad Japan recipes, which constrains results to a specific locale. Because the skill does not offer a language/locale choice or explain that this is an intentionally region-specific tool, it may conflict with a policy requiring user choice for locale-specific behavior.

Content

No source excerpt is available for this finding.