ClawHub
Back to skill

Security audit

Language Specialist

Security checks for vulnerabilities and agentic risk

Overview

This is a broad coding-guidance skill with no executable installer, hidden persistence, credential handling, or unrelated data access.

Install this if you want broad programming guidance to apply across many coding tasks. Because it may activate for ordinary development requests, users who prefer specialized framework, database, or security-review skills should be aware of possible overlap and choose routing accordingly.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger conditions are broad enough to match a very large share of ordinary coding requests, which can cause this skill to activate in situations where a narrower or more specialized skill would be more appropriate. In an agent system, overbroad activation increases the chance of unintended instruction precedence, response shaping, or policy bypass through capability overreach, even if the content itself is not overtly malicious.

Static analysis

No suspicious patterns detected.