ClawHub
Back to skill

Security audit

Clawmatch

Security checks for vulnerabilities and agentic risk

Overview

This is a lightweight, clearly disclosed matching skill with no executable code, but its broad trigger phrases could activate during ordinary compatibility conversations.

Before installing, be aware that the skill is still a coming-soon concept and may trigger on broad compatibility phrases. Prefer invoking it by name when you specifically want compatibility matching, and review any future version for how it collects, stores, or shares psychological profile data.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill declares broad natural-language trigger phrases such as "find my match" and "who am I compatible with," which are common expressions a user might say outside the specific intent to invoke this skill. That can cause unintended activation, exposing users to psychological profiling or compatibility workflows when they did not explicitly request this tool, which is especially sensitive given the skill's focus on deep personal analysis.

Static analysis

No suspicious patterns detected.