ClawHub
Back to skill

Security audit

Get public holidays by country and year

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward public-holiday lookup that uses a disclosed third-party API and does not include executable code or persistence.

Before installing, understand that holiday lookups require sending the requested country and year to apipick with your API key. Store the key in the APIPICK_API_KEY environment variable where possible, and avoid pasting unrelated sensitive information when asking for holiday lookups.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Confidence
94% confidence
Finding
The README instructs users to use a third-party API and supply an API key, but it does not clearly disclose that user-provided inputs such as country/year queries will be sent off-platform to apipick. This is a real privacy/transparency issue because users and operators may assume the skill is local-only, leading to unintentional disclosure of potentially sensitive prompts or usage patterns to an external service.

Static analysis

No suspicious patterns detected.