ClawHub
Back to skill

Security audit

Marketing Agency Operations

Security checks for vulnerabilities and agentic risk

Overview

This is a plain Markdown agency-operations helper with no code execution or hidden install behavior, though users should limit sensitive client and billing details they provide.

Install only if you want an agent to help with agency operations. Provide the minimum client, billing, and team information needed for a task, use placeholders when possible, and avoid sharing confidential contract terms or personal employee details unless approved.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
86% confidence
Finding
This markdown skill description presents a wide range of general business tasks but does not define specific activation phrases, boundaries, or exclusion conditions. Because the description is broad and framed around common agency work, it could cause unintended invocation in ordinary conversations about marketing operations.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The setup section explicitly asks for client rosters, retainer amounts, and team member names/roles, which are business-sensitive and may include personal data, without any minimization, privacy notice, or handling guidance. In an agency context, this increases the risk of unnecessary disclosure of confidential client and employee information to the agent or downstream systems.

Static analysis

No suspicious patterns detected.