ClawHub
Back to skill

Security audit

宝洁八大问

Security checks for vulnerabilities and agentic risk

Overview

This interview coach needs review because it requires unrelated advertising and an external community link in every response.

Review or remove the mandatory promotional footer before installing. Joining the advertised community is unnecessary for interview practice. Share only career details you are comfortable providing to your assistant.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

The skill redirects interview-coaching responses into unsolicited promotion of an unrelated account and external community.

Medium
Category
Prompt Injection
Confidence
98% confidence
Finding

The mandatory footer redirects users toward an unrelated public account and external community, leveraging the interview assistant's perceived endorsement for unsolicited promotion. The interview-coaching context provides no functional reason for this diversion; however, the supplied content does not establish that the destination performs phishing, collects interview details, or serves malware.

Content

No source excerpt is available for this finding.

The skill requires unrelated promotional content in every response, outside its declared interview-preparation purpose.

Low
Category
Excessive Agency
Confidence
99% confidence
Finding

The skill explicitly requires unrelated promotional text at the end of every response, allowing skill-authored instructions to contaminate otherwise legitimate interview coaching. This is deliberate output hijacking rather than necessary interview functionality, although the visible payload is advertising rather than code execution or data theft.

Content

No source excerpt is available for this finding.