ClawHub
Back to skill

Security audit

Book Skill Finder

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local book-search helper; the scanner concerns appear to be false positives or quality issues rather than unsafe behavior.

Reasonable to install if you want local book lookup. Treat the returned ratings as Heardly/local dataset scores rather than verified Goodreads ratings, and review any generated SOUL, MEMORY, or SKILL snippets before manually adding them to agent knowledge files.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (7)

YARA rule 'agent_skill_prompt_injection_hidden_instructions': Prompt injection or hidden instructions embedded in AI agent skill text [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · data/books.json (reported line 361)May include surrounding context.

json
ive People: Powerful Lessons in Personal Change",
      "bookauthor": "Stephen R. Covey",
      "booklanguage": "en",
      "bookscore": "9.5",
      "bookabout": "Ever wondered how shifting your mindset could transform your life? What if true success comes from within, not just external achievements? This book explores practical habits to improve your relationships, leadership, and personal fulfillment."
    },
    {
      "id": 59039,
      "bookname": "How To Win Friends And Influence People ：Timeless bestseller",
      "bookauthor": "Dale Carnegie",
      "booklanguage": "en",
      "bookscore": "9.5",
      "bookabout": "This book teaches you how to win others' trust, inspire cooperation, and navigate difficult situations with empathy and appreciation. Want to influence people without manipulation? Curious how simple gestures can transform relationships? Dive in and discover!"
    },
    {
      "id": 59040,
      "bookname": "Who Moved My Cheese?",
      "bookauthor": "Spencer

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · data/books.json (reported line 33078)May include surrounding context.

json
�增加规则？如果救火般的应对方式消耗的能量比节省的还要多呢？小而原则导向的改变，是否能将混乱转化为持久的适应力？本书挑战静态系统，并揭示了一条更优的组织发展道路。"
    },
    {
      "id": 68615,
      "bookname": "The World Exists to Set Us Free: Straight-Up Dharma for Living a Life of Awareness",
      "bookauthor": "​​​LARRY ROSENBERG",
      "booklanguage": "en",
      "bookscore": "9.3",
      "bookabout": "What if fear wasn't the enemy? What if doing the dishes could be meditation? Could letting go of who you think you are set you free? This book quietly questions everything we assume about awareness, pain, identity, and real freedom."
    },
    {
      "id": 68616,
      "bookname": "世界存在是为了让我们自由：直面正法，过一种觉知的生活",
      "bookauthor": "​​​LARRY ROSENBERG",
      "booklanguage": "zh",
      "bookscore": "9.3",
      "bookabout": "如果恐�

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill advertises very generic trigger phrases such as 'find a book', 'search books', 'book recommendation', and 'what to read', which overlap heavily with normal user conversation. In agent ecosystems that auto-route based on trigger text, this can cause over-invocation of the skill, unintended interception of user requests, and accidental disclosure or misuse of context intended for another tool or skill.

Content

No source excerpt is available for this finding.

YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]

Medium
Category
YARA Match
Confidence
65% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · data/books.json (reported line 1185)May include surrounding context.

json
cess in business, relationships, and beyond."
    },
    {
      "id": 60070,
      "bookname": "AI Superpowers: China, Silicon Valley, and the New World Order",
      "bookauthor": "Kai-Fu Lee",
      "booklanguage": "en",
      "bookscore": "9.0",
      "bookabout": "What happens when AI reshapes entire economies? Can human creativity outpace machine efficiency? How do entrepreneurs thrive in a fierce, competitive landscape? This book explores these pressing questions through powerful, real-life stories."
    },
    {
      "id": 60084,
      "bookname": "Guns, Germs, and Steel: The Fates of Human Societies",
      "bookauthor": "Jared Diamond",
      "booklanguage": "en",
      "bookscore": "9.1",
      "bookabout": "Why did some societies thrive while others struggled? This book unravels the hidden forces of geography, technology, and biology shaping human history, offering profound insights into the roots of global inequalities and progress."
    },
    {
      "id": 60107,

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The manifest explicitly says the skill finds books with Goodreads ratings, but this file never accesses Goodreads or distinguishes ratings as Goodreads-derived. Instead, it loads local JSON data and exposes book.rating from book.bookscore while generating Heardly links. That is a semantic mismatch between the advertised source/behavior and the implemented one.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The code documents searchByConcept as searching by concept/keyword, and the manifest also advertises key concepts. However, loadBooks only maps title, author, rating, summary, and language from the source data, so b.key_concepts is never populated here. In practice, concept search works only against summaries unless some external mutation adds the field, which contradicts the documented intent.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The natural-language description includes a locale/language constraint: 'English language'. Under the policy, forcing or declaring a specific language without user opt-in or clear regional justification can be a language/locale policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.