ClawHub
Back to skill

Security audit

recruitment-assistant

Security checks for vulnerabilities and agentic risk

Overview

This markdown-only recruitment skill is coherent and local, but users should treat resumes and generated reports as sensitive hiring data.

Before installing, make sure resume folders and generated reports are stored in access-controlled locations, shared only with authorized hiring staff, deleted when no longer needed, and reviewed by a human for job-relatedness and bias before making hiring decisions.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The README promotes automated ingestion, scoring, ranking, and report sharing for resumes, which are highly sensitive personal data, but does not adequately warn users about data minimization, access control, retention, or safe handling of generated reports. In a recruitment context, this omission can lead to unnecessary exposure of candidate PII and broad internal distribution of sensitive assessments, increasing privacy and compliance risk.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The manifest description and the entire user-facing skill documentation are written only in Chinese, with no indication that other languages are supported or that Chinese is a required locale for a region-specific workflow. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The entire template and all user-facing instructions are written only in Chinese, with no indication that other languages are supported or that Chinese is optional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The file is entirely in Chinese with no language choice or stated locale restriction, which can cause operators, reviewers, or downstream agents who expect another language to misunderstand instructions or skip important evaluation details. In a recruitment workflow, that can lead to inconsistent screening, interview bias, or failure to detect problematic candidate information because the content is not accessible to all intended users.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The README consistently instructs and demonstrates usage only in Chinese, which can amount to forcing a specific language without user opt-in. There is no note that the skill is China-specific or that users may interact in another language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

SQP-3 applies to all file types and covers language or locale policy violations. This markdown guidance is fully Chinese-language content and does not indicate that the user can choose another language or that the constraint is justified for a region-specific use case.

Content

No source excerpt is available for this finding.