ClawHub
Back to skill

Security audit

天台研究

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Tiantai Buddhism research helper, with disclosed knowledge-base and CBETA citation workflows and no executable or persistent behavior.

Install this if you want a Tiantai-focused research assistant with CBETA-style source checking. Be aware that live CBETA API searches or online document tools may send research terms to external services, so avoid using them with private or sensitive prompts unless you are comfortable with that.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
83% confidence
Finding
The skill states that it will prioritize internal knowledge bases and not automatically search the web, but later introduces direct use of external CBETA APIs and sites. This creates a policy/behavior mismatch that can lead the agent to transmit user queries or research topics to external services unexpectedly, weakening data-boundary guarantees and auditability.

Vague Triggers

Medium
Confidence
76% confidence
Finding
The trigger list includes broad terms such as '天台', '法华', and '止观', which can appear in ordinary discussion, comparative religion, literature, or unrelated Buddhist contexts. Overbroad activation can cause the wrong skill to engage, increasing the chance of unnecessary tool use, irrelevant retrieval, and accidental exposure of user prompts to external or privileged resources.

External Transmission

Medium
Category
Data Exfiltration
Content
- Dev: https://cbdata.dila.edu.tw/dev/search?q=關鍵詞
- Stable: https://cbdata.dila.edu.tw/stable/search?q=關鍵詞
- 备用: https://api.cbetaonline.cn/search?q=關鍵詞
- 必须用繁体中文检索
Confidence
81% confidence
Finding
The document includes direct external API endpoints, including a backup domain, for live searching. If the skill uses these endpoints, user questions and research terms may be transmitted to third-party services outside the declared knowledge-base workflow, creating privacy, compliance, and prompt exfiltration risks.

Static analysis

No suspicious patterns detected.