ClawHub
Back to skill

Security audit

Windows System Monitor

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Windows status-monitoring guide with no bundled executable code, but users should control when it runs and where alerts are sent.

Before installing, confirm that monitoring only runs when you ask or on a schedule you explicitly approve. Inspect any separate Python monitor before running it, and configure Feishu alerts to send only minimal necessary system details to trusted recipients.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger phrases are broad, natural-language expressions such as '检查系统状态' and 'Windows 运行正常吗', which can overlap with ordinary conversation and cause unintended invocation. Because this skill is user-invocable and performs system monitoring actions, accidental activation could expose system status data or create noisy monitoring/report generation even if it does not modify the host.

Static analysis

No suspicious patterns detected.