ClawHub
Back to skill

Security audit

Foraging Wild Edibles

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a coherent foraging guide, but it includes risky advice that could lead someone to test or eat unknown wild plants, plus an unpinned install command.

Review this carefully before installing. Do not use it to decide that an unknown wild plant is safe to eat, and do not rely on the universal edibility test or a single smell-based rule. Use qualified local experts, authoritative regional field guides, and poison-control or emergency services for suspected exposure. If installing, prefer a pinned and verified package source rather than the unpinned npx command.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (3)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:13
Finding

Unpinned Package Execution Through npx

Content
View full analysis
Remediation
View remediation

other

Error
Location
SKILL.md:311
Finding

Unsafe Ingestion-Based Universal Edibility Test

Content
View full analysis
Remediation
View remediation

other

Error
Location
SKILL.md:474
Finding

Single-Feature Allium Identification Presented as a Guarantee of Safety

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Harmful Content Injection

Critical
Category
Prompt Injection
Confidence
95% confidence
Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · SKILL.md (reported line 186)May include surrounding context.

md
(fritters, cordial, tea)
   SEASON: flowers in spring, berries in late summer
   ID: compound leaves with 5-7 toothed leaflets, flat-topped clusters
     of tiny white flowers, clusters of small dark purple-black berries
   WARNING: raw berries cause nausea. Cook or dry them.
   CRITICAL: do NOT confuse with water hemlock or pokeweed berries

9. CATTAIL (Typha latifolia)
   WHERE: marshes, pond edges, ditches, anywhere with standing water
   PARTS: nearly everything — young shoots (spring, like hearts of palm),
     pollen (flour supplement), rhizomes (starchy, can be processed

Harmful Content Injection

Critical
Category
Prompt Injection
Confidence
95% confidence
Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · SKILL.md (reported line 270)May include surrounding context.

Agent action: These are the ones that kill or seriously injure. Knowing what NOT to eat is more important than knowing what to eat.

text
DEADLY PLANTS TO RECOGNIZE AND AVOID:

WATER HEMLOCK (Cicuta species):
- THE most toxic plant in North America
- Looks like: wild carrot, wild parsnip, elderflower
- Found near water, wet meadows, stream banks
- White umbrella-shaped flower clusters
- DISTINCTIVE: purple-streaked hollow stem, chambered root

Missing User Warnings

High
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill includes a step-by-step universal edibility test for unknown plants, which is hazardous because many plant toxins are not reliably detected by taste/contact protocols and delayed toxicity can still cause severe poisoning or death. Although the section says it is survival-only, the procedural detail materially enables risky behavior in a domain where text guidance is inherently unreliable.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
90% confidence
Finding

The skill references npx clawhub install howtousehumans/foraging-wild-edibles without pinning an exact package or artifact version. That creates a supply-chain risk: future upstream changes or compromise of the package name could cause users to install unexpected code when following the install instruction.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The 'When to Use' section is broad enough to trigger on casual plant-identification or food-supplement queries, including wilderness scenarios, without strong exclusion boundaries. In this context, over-triggering is dangerous because the skill gives actionable advice about consuming wild plants, where even small identification mistakes can have serious health consequences.

Content

No source excerpt is available for this finding.