Security audit
Security checks for vulnerabilities and agentic risk
This is a minimal integration-help template with broad wording but no hidden execution, persistence, credential use, or destructive behavior.
Installers should treat this as a starter template rather than a specialized integration skill; narrow the supported platforms and invocation criteria before relying on it in a production skill library.
Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.
# My Integration Skill
This is a starter ClawHub skill template.
Edit SKILL.md and add any supporting files before publishing.
The skill's activation guidance is very broad: 'Use this skill when a user needs help with integrations.' Because many ordinary requests could fit that description, the agent may invoke this skill in situations where a more specific or safer skill should handle the task. This can cause unintended routing and unreliable behavior, though the content itself is not directly harmful.
The example trigger 'Help me connect Service A to Service B' is phrased like common everyday user language, which increases the chance of accidental invocation based on broad keyword matching. In this skill, that mainly creates over-triggering and misrouting risk rather than direct security compromise, but it still weakens reliable skill selection.