ClawHub
Back to skill

Security audit

wechat-group-qa/

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says: it organizes Enterprise WeChat group Q&A, but users should understand that names, questions, and timestamps may be saved locally.

Before installing, confirm that the group has consented to the bot reading relevant messages and saving Q&A records locally. Treat the generated markdown file as potentially sensitive because it can contain student names, timestamps, and message content.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Content
---
AIGC:
    ContentProducer: Minimax Agent AI
    ContentPropagator: Minimax Agent AI
    Label: AIGC
    ProduceID: "00000000000000000000000000000000"
    PropagateID: "00000000000000000000000000000000"
    ReservedCode1: 3044022077e105c07afd6ebe7152569313c8b8837539e92b7f77370a999b6642dde8c70402202f18e36d2cb4e1f119397eeec12e84e86b706e55c39a734308f82aa6e26d0af0
    ReservedCode2: 304502206f4a257ccf643a8acc3e0da80cde501821b24b6be7fe1a7a1ebd5ec38a01e85b022100f59672f4422459c14932484ad04a101a26cfcc77e94b88f617b9e4c6e9d128a6
description: 从企业微信群提取学员提问，按课程阶段分类并生成表格。当用户在企业微信群里@机器人提问时，自动记录问题并整理。
name: wechat-group-qa
---

# 微信群学员提问提取技能

## 功能

从企业微信群消息中提取学员提问，
Confidence
80% confidence
Finding
YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill is explicitly designed to read enterprise WeChat group messages and extract user questions, which involves processing potentially sensitive personal or business communications. The documentation does not warn users that message contents may be collected, analyzed, and retained, increasing the risk of uninformed data exposure and privacy non-compliance.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill states that question records are persisted to a local markdown file, but it does not disclose this persistence behavior as a privacy or security concern. Storing names, timestamps, and message content in a local file can create an accessible audit trail of user communications that may be exposed, copied, or retained longer than intended.

Static analysis

No suspicious patterns detected.