ClawHub
Back to skill

Security audit

Achievement Hunter Tips

Security checks for vulnerabilities and agentic risk

Overview

This skill is a low-risk text guidance helper for prioritizing personal goals and does not perform external actions.

Installers should treat this as a lightweight planning prompt, not a full progress tracker. It appears safe from a security perspective, but users should expect it to provide structured advice rather than automatically analyze or update goals.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
97% confidence
Finding

The declared purpose says this skill helps users prioritize many achievements or milestones without perfectionism. However, the implementation does not analyze user goals, categorize achievements, or produce a prioritization strategy. Its primary function is to load and parse the skill's markdown file and render a descriptive summary card about the skill itself. The code also exposes internal metadata/template content via mode switches, which is undeclared and materially different from the stated purpose. This is a clear description-behavior mismatch.

Content

No source excerpt is available for this finding.

Tp4

High
Category
MCP Tool Poisoning
Confidence
98% confidence
Finding

The declared description is about helping users prioritize achievement goals. The actual code chunk does not implement or demonstrate that planning behavior; it only tests generic skill-loader/handler functionality such as reading metadata, loading templates, and returning content in different modes. This is a materially different primary purpose from the declared skill behavior, so it should be flagged as a mismatch.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.