ClawHub
Back to skill

Security audit

AI KEY·有什么到期了

Security checks for vulnerabilities and agentic risk

Overview

This is a local tracking/reminder skill whose persistent notes are disclosed and aligned with its stated purpose.

Before installing, confirm the configured tracking and memory folders are acceptable for long-term local storage, avoid storing customer names, amounts, or other sensitive details, and use explicit invocations if you do not want ordinary phrases to trigger the skill.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger list includes common conversational phrases such as 'what's due', 'where did we leave off', and 'save this conclusion', which can appear in ordinary dialogue outside an explicit tool invocation. That increases the chance of unintended activation and cross-session memory access or writes, especially because this skill reads and writes persistent tracking data by default.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly directs persistent file writes to tracking and memory paths, including long-lived notes about commitments, in-flight work, and user preferences, but does not require a clear storage notice or consent at write time. This creates a privacy and retention risk because users may not realize sensitive operational details will be stored on disk across sessions.

Static analysis

No suspicious patterns detected.