ClawHub
Back to skill

Security audit

Xiaohongshu Content Creator

Security checks for vulnerabilities and agentic risk

Overview

This is a simple Chinese Xiaohongshu content-writing skill with no code execution, persistence, credentials, or hidden behavior.

Install this if you want Chinese-language help drafting Xiaohongshu posts, titles, hashtags, and posting strategy. Be aware it may activate on broad terms like 筆記 or 爆款, so users who often use those words outside Xiaohongshu workflows may want narrower triggers.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger list includes broad, common terms such as '筆記' and '爆款', which can cause the skill to activate in unrelated conversations. This creates an over-triggering risk where the assistant may invoke this skill unexpectedly, reducing reliability and potentially steering users into unintended content-generation workflows.

Natural-Language Policy Violations

Medium
Confidence
87% confidence
Finding
The skill is written entirely in Chinese and does not state whether it only supports Chinese-language use cases or offer a language fallback. This can cause unintended behavior for users operating in other languages, including confusion, poor UX, and incorrect invocation or output expectations.

Static analysis

No suspicious patterns detected.