ClawHub
Back to skill

Security audit

Academic Reader (Holli)

Security checks for vulnerabilities and agentic risk

Overview

This is a simple academic reading prompt skill with no executable code, install script, persistence, credential access, or data exfiltration behavior found.

Reasonable to install if you want a Chinese-oriented academic reading prompt pack. Review the prompts to ensure the language and methodology match your needs; no code execution or sensitive access was found.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 1)May include surrounding context.

md
---
version: 1.0.0
name: academic-reader
description: An AI-powered academic reading assistant that helps you read, summarize, and reflect on technical books using the methodology from Qian Xuesen's "Engineering Cybernetics". Includes chapter-by-chapter analysis, critical thinking prompts, and personal integration guidance.

Ae1

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 70)May include surrounding context.

md
- `SKILL.md` - This file

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The usage section provides a single invocation example entirely in Chinese ("帮我分析[书名]，用工程控制论的方法论") and does not indicate that other languages are supported or optional. This can violate language/locale policy because the skill appears to require a specific language without user opt-in or justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The natural-language description and system prompt are entirely in Chinese and instruct the assistant directly in that language, but there is no indication that users can opt into another language or that the skill is intended only for a Chinese-language context. This can violate language/locale policy expectations for user choice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The README presents the skill entirely in Chinese and instructs users to invoke it with a Chinese phrase, with no indication that other languages are supported or that Chinese is optional. This is a natural-language policy concern because it effectively imposes a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Vague Triggers

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

This is a manifest file, so vague-trigger review applies. The config provides a general description and system prompt for an academic reading assistant, but does not specify any explicit activation phrases, boundaries, or exclusion conditions, making invocation scope ambiguous if this metadata is used for routing or selection.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file presents all prompts and instructions exclusively in Chinese, which can constitute a language/locale policy issue when no user choice or opt-in is provided. The file does not indicate that the skill is region-specific or offer alternative language options.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.