ClawHub
Back to skill

Security audit

Reports Creator

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed report-generation guide for local logs, databases, and system metrics, with privacy and scoping caveats but no hidden or malicious behavior found.

Before installing, treat generated reports as potentially sensitive because they may summarize logs, documentation changes, filesystem activity, and operational metrics. Store the reports directory with appropriate permissions, review any scheduled cron setup yourself, and avoid sharing reports until secrets or private operational details are redacted.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill explicitly aggregates data from logs, databases, memory notes, and system metrics, then writes report files under a reports/ directory, but it does not warn users that the generated outputs may contain sensitive operational or documentation data. This creates a real risk of unintended data exposure, especially if reports are broadly readable, retained for long periods, shared for review, or generated automatically on a schedule.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill body uses German-language instructions and labels, while the file does not state that the skill is intentionally German-only or provide an option for another language. That can violate language/locale policy when users are not given a choice or clear justification.

Content

No source excerpt is available for this finding.

Vague Triggers

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The package description is very broad ('Automated report generation for self-reflection and system analysis') and does not clearly constrain what data sources, scopes, or triggers are permitted. In an agent skill context, vague capability descriptions can enable overbroad invocation and access to sensitive logs, databases, or system metrics beyond the intended reporting use case.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.