ia-c-systems

• Outcome: Pass
• Latest audit: Nov 14, 2026 · 2:43 PM UTC
• Version: 5.1.6

Overview

ClawScan marks this skill benign with medium confidence: it reports C systems programming guidance, while noting a mismatch related to skill evaluation commands and an anti-refusal finding that scanners judged not to reflect the skill’s intent.

The verdict is benign, but confidence is medium and the scan was partial because two local references could not be resolved. Before installing, consider whether the additional skill evaluation commands fit your needs; treat the result as reassuring but not a guarantee of safety.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Description-Behavior Mismatch

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence

Finding

The supplied shell commands evaluate and diagnose the ia-c-systems skill rather than provide or apply the declared C programming guidance. This is a materially different primary purpose. The implementation of distiller.py is not supplied, so no additional resource access or downstream behavior can be established.

Content

No source excerpt is available for this finding.

Anti-Refusal Statement

High

• Category: Anti-Refusal
• Confidence: 80% confidence

Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · references/php-extension-c.md (reported line 152)May include surrounding context.

md

Keep the guard around the smallest region that differs. A guard wrapping a whole function duplicates the body and the two copies drift.

A feature gated on a core-provided `HAVE_*` macro (`#ifdef HAVE_PHP_SESSION`) compiles out with no warning against a PHP built without that extension, so it gets zero coverage and ships untested. Keep at least one build-and-test lane on a PHP that defines the macro, and read the macro rather than redefining it.

## Verify