ClawHub
Back to skill

Security audit

Subscriptions

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent subscription tracker, but it may persist sensitive financial details from broad triggers without explicit confirmation.

Install only if you are comfortable with a local ~/subscriptions/ folder containing subscription costs, billing dates, usage notes, and payment method fragments. Treat it as sensitive financial metadata and consider asking the agent to confirm before adding entries and to omit card fragments unless needed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
96% confidence
Finding
The activation rules are broad enough that ordinary conversation about subscriptions or spending could trigger the skill unexpectedly. Because the skill creates and updates local tracking files, unintended activation can lead to collection or persistence of sensitive financial and usage data without clear user intent.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill stores subscription details, billing dates, payment method fragments, and usage patterns in local files under ~/subscriptions/ without any warning in the description. This is sensitive personal financial metadata, and users may not realize it will be retained on disk where other local users, backups, or malware could access it.

Static analysis

No suspicious patterns detected.