ClawHub
Back to skill

Security audit

TV Program Preview - 电视节目预告

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward TV schedule lookup that uses a documented third-party API key and sends channel/date queries to the advertised TV data provider.

Install only if you are comfortable creating a JisuAPI account and letting this skill send your JISU_API_KEY plus TV channel/date query details to JisuAPI. Keep the API key scoped to this service and rotate it if it is exposed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (5)

Tp2

High
Category
MCP Tool Poisoning
Confidence
85% confidence
Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill declares that it requires an environment variable and invokes a Python script that will necessarily make outbound API requests, but it does not explicitly declare tool scope or allowed permissions. This creates a policy gap where the runtime may grant broader capabilities than reviewers or users expect, increasing the risk of unintended secret access or network use.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger description includes a broad catch-all phrase ('or similar TV program questions'), which leaves invocation boundaries ambiguous. Overbroad routing can cause the skill to activate for loosely related requests, leading to unnecessary network calls, external data sharing, or interference with more appropriate skills.

External Transmission

Medium
Category
Data Exfiltration
Content
import requests


BASE_URL = "https://api.jisuapi.com/tv"


def _call_tv_api(path: str, appkey: str, params: dict = None):
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Low
Confidence
83% confidence
Finding
This Python file makes a network request to a third-party service using parameters derived from user input, but the request path itself has no confirmation prompt or user-facing notice. Although the module docstring names the API provider, the code path performing transmission does not disclose that request data will be sent externally.

Static analysis

No suspicious patterns detected.