ClawHub
Back to skill

Security audit

Popeye Career

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese career-assistant prompt-template skill with no executable behavior, persistence, credential access, or hidden authority.

Installers should be aware that common Chinese requests like asking for resume edits, interview prep, or report writing may invoke this skill. Review generated career or workplace text before sending it, especially if it contains private employment details or business information.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

该 markdown 文件定义了技能触发词，其中“帮我准备面试”属于自然日常表达，缺少更明确的调用边界或限定上下文。文件中也没有提供负例、排除条件或更严格的触发范围说明，因此存在非预期激活风险。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

文件整体以中文定义技能名称、触发词、模板和示例，默认要求以中文完成输出，但未说明是否支持其他语言，也未给予用户语言/地区选择。根据语言/locale 政策，若强制固定语言而无用户选择或合理限定，属于自然语言策略风险。

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

该 markdown 文件声明的触发词为“写汇报”或“帮我写汇报”，其中“帮我写汇报”属于自然日常用语，缺少更明确的上下文约束、限定场景或排除条件。这种表述容易与普通聊天请求重叠，增加技能被非预期调用的可能性。

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation phrase "帮我改简历" is a natural, general request that could easily appear in ordinary conversation, making unintended invocation more likely. The file does not provide any scope limits, exclusion conditions, or negative examples to clarify exactly when this skill should trigger.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.