ClawHub
Back to skill

Security audit

English Daily

Security checks across malware telemetry and agentic risk

Overview

The skill appears to store English-learning progress in shared memory, which is disclosed and fits its stated learning-tracker purpose.

Before installing, be comfortable with the skill writing a marked progress block into MEMORY.md. Keep the block scoped to one user/profile, avoid manually editing the embedded SRS JSON, and check that future updates replace only the english-daily profile block.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Hidden Instructions

High
Category
Prompt Injection
Content
**流程：**

1. 新用户 → 运行 `register.js`，它输出一段 `<!-- english-daily:profile:<userId> -->` markdown 区块。**把该区块写入 MEMORY.md。**
2. 后续每次学习/测验/看进度 → 先**读取 MEMORY.md** 中该区块，把 等级/每日目标/streak/积分/SRS进度(JSON) 作为参数传给脚本。
3. `daily-push.js`（刷新 streak/上次学习）、`quiz.js --score`（累加积分、更新 SRS）、`progress.js`（升级时）会输出**更新后的区块**——用它覆盖 MEMORY.md 中的旧区块。
4. SRS 进度是一段紧凑 JSON，存在区块的「SRS进度」行；传参时原样作为 `--progress '<JSON>'`，勿手动改写。
Confidence
92% confidence
Finding
<!-- english-daily:profile:<userId> -->` markdown 区块。**把该区块写入 MEMORY.md。** 2. 后续每次学习/测验/看进度 → 先**读取 MEMORY.md** 中该区块，把 等级/每日目标/streak/积分/SRS进度(JSON) 作为参数传给脚本。 3. `daily-push.js`（刷新 streak/上次学习）、`quiz.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.