ClawHub
Back to skill

Security audit

Cycle

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple workflow-design guide with disclosed persistence concepts and no executable code or hidden behavior.

Before installing, understand that this skill helps agents design reusable workflows and may lead them to create persistent cycle files such as state.md. Review any generated cycle or state content, especially if it includes personal preferences, business processes, or sensitive project details.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger description is extremely broad and overlaps with ordinary conversation rather than a specific invocation context. The file does not provide constraints, examples, or exclusions clarifying when this cycle should activate versus when a user is merely discussing ideas.

Vague Triggers

Medium
Confidence
95% confidence
Finding
This trigger is broad enough to match common everyday requests and does not define boundaries for activation. Without more specific scope or negative examples, the skill could be invoked unintentionally for general discussion.

Static analysis

No suspicious patterns detected.