ClawHub
Back to skill

Security audit

Rental Property Manager

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent rental-property management skill, but users should verify legal content before relying on eviction or notice guidance.

Install only if you are comfortable storing rental, tenant, lease, and financial details locally in the OpenClaw workspace. Do not rely on the Ohio eviction, notice, tax, or compliance summaries as legal or tax advice; verify current official requirements or consult a qualified professional before sending notices, filing cases, withholding deposits, or making tax decisions.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This reference provides specific Ohio eviction steps and timelines as if they are complete and universally applicable, but landlord-tenant procedures are highly jurisdiction-specific and can change based on local court rules, factual circumstances, and updated law. In a property-management skill, users may rely on this operational guidance to take real-world legal action, creating risk of unlawful eviction steps, missed requirements, or noncompliance because there is no warning that the content is informational only and may be incomplete.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.