ClawHub
Back to skill

Security audit

快递查询

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrowly scoped Chinese courier-help reference tool with no evidence of hidden access, persistence, exfiltration, or destructive behavior.

Install this if you want Chinese-language help with common China courier contact and complaint workflows. Treat phone numbers, service hours, legal compensation, and platform rules as starting points and verify current details on the carrier's official site or app for time-sensitive cases.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: kuaidi
description: "查询中国常见快递公司的官方客服电话、常用联系渠道、投诉与催件路径，并给出延误、长时间不更新、显示签收但未收到、驿站代收、破损、丢件、拒收退回、疑似诈骗短信或电话等常见快递问题的处理建议。Use when the user asks about 顺丰、京东快递、EMS、中通、圆通、申通、韵达、德邦、极兔等快递公司的电话、运单异常处理、投诉升级、理赔准备材料、或需要一个可执行的下一步动作清单。NOT for real-time tracking results, current fee quotes, or legally definitive compensation advice without checking the carrier's latest official rules."
metadata: { "openclaw": { "emoji": "📦" } }
---

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The default prompt explicitly instructs the skill to answer Chinese courier questions, and the interface metadata is also Chinese-only. This can violate language or locale policy expectations if users are not given a choice of language or informed that the skill is intended only for Chinese-language use.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This manifest enables implicit invocation but does not define any narrow trigger phrases, scope limits, or exclusion conditions. That makes it unclear when the skill should activate versus when ordinary conversation about courier issues should not invoke it.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file is entirely written as Chinese-only operational guidance, including response defaults such as how to answer users and what wording to provide. There is no indication that the skill is region-specific by design or that users may choose another language, which can violate language/locale policy for general-purpose skills.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file presents all instructions and guidance exclusively in Chinese, and it does not state that the skill is intended only for Chinese-speaking users or offer any language selection. That can violate language/locale policy by forcing a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

The line says "用这个技能处理中文快递问题", which imposes a Chinese-language scope in natural language. Under the policy rule, forcing a specific language without user opt-in can be a locale/language policy violation, and the file does not explicitly offer alternatives or ask the user for language preference.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The user-facing usage text is entirely in Chinese, and the rest of the script’s guidance strings are also Chinese-only. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.