ClawHub
Back to skill

Security audit

Gws People

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Google People/Contacts CLI reference that can read and modify contacts, with no hidden code, but write and delete actions should be approved carefully.

Install only if you intend to let the agent use your authenticated Google People access. Treat contact and contact-group create, update, and delete operations as sensitive: ask the agent to show the exact contact, group, photo, and fields before making changes.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The skill documents destructive contact-group operations such as create, delete, and update without any explicit warning that these actions modify or permanently remove user data. In an agent setting, this increases the chance that the model invokes state-changing commands without clear user confirmation, leading to accidental loss or unwanted modification of contacts organization data.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill lists multiple person/contact mutation methods, including create, batch update, delete photo, update contact, and update photo, but does not warn that these alter personal contact records. Because contacts are sensitive personal data, omission of a user-facing mutation warning can cause accidental edits or deletion when an agent uses the skill autonomously or on ambiguous instructions.

Static analysis

No suspicious patterns detected.