ClawHub
Back to skill

Security audit

hot-news-tracker

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward news lookup skill that runs a disclosed external CLI for Toutiao hot-news and keyword searches.

Before installing, make sure you trust the external `gnomic-cli` package and are comfortable with the agent sending your news search terms to that service. Avoid using it for sensitive private topics, but the reviewed artifacts do not show credential access, local data collection, persistence, or destructive behavior.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
83% confidence
Finding
The skill description includes very broad trigger phrases such as '最近发生了什么大事' and 'XX最新动态', which can match many general user requests beyond a narrowly scoped news lookup intent. In an agentic system, this can cause the skill to be invoked when the user meant a different capability, leading to unintended command execution, incorrect tool routing, or unnecessary external data access.

Static analysis

No suspicious patterns detected.