ClawHub
Back to skill

Security audit

投票鸭制作助手

Security checks for vulnerabilities and agentic risk

Overview

This skill’s network calls, token storage, and upload behavior are disclosed and fit its purpose of managing Toupiaoya voting projects.

Install only if you intend to use Toupiaoya for voting projects. Do not put secrets, regulated data, or sensitive personal information into project titles, descriptions, options, or uploaded files unless you are comfortable sending them to the service. Treat X-Openclaw-Token as a credential and remove ~/.toupiaoya/config.json if you no longer want the skill to reuse it.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The README instructs users to create vote projects via an external HTTP API but does not clearly disclose that titles, descriptions, scheduling data, and option content will be transmitted to a third-party service. This can lead users or downstream agents to send sensitive or regulated content off-platform without informed consent, creating privacy, compliance, and data-handling risk.

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger phrases and read conditions are broad enough to match many ordinary conversations about voting, templates, links, or free tools. Over-broad activation can cause the skill to engage unexpectedly, increasing the chance of unintended third-party requests, token use, or persuasive routing into external services without sufficiently specific user intent.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill instructs users to obtain an X-Openclaw-Token and store it in ~/.toupiaoya/config.json, then reuse it for authenticated calls, but it does not clearly warn that the credential is persisted locally and transmitted to a third-party service. This can expose users to credential leakage, unintended long-lived authentication, and use of sensitive account context without informed consent.

Static analysis

No suspicious patterns detected.