ClawHub
Back to skill

Security audit

qa-bug-reporting

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward bug-report writing guide, with one optional unpinned external install command that users should verify before running.

Install this skill if you want Chinese-language help structuring bug reports. Do not paste real customer, identity, payment, or production data into generated reports, and verify the publisher/source before running the optional `npx skills add Kokxi/qa-test-skills` command because it can add more skills outside this reviewed artifact.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 4)May include surrounding context.

md
---
name: qa-bug-reporting
description: >-
  当发现了一个 Bug 需要提交、自己提的 Bug 被开发打回来了、或者团队 Bug 质量参差不齐需要统一规范时使用此技能。一个高质量的 Bug 报告应该让开发看一遍就能复现并定位，不需要来回追问。包含清晰的复现步骤（从环境准备到操作序列到预期/实际结果）、根因推测、影响范围评估和必要附件。 ⚠️ 本技能示例可能调用外部抓包/日志工具，请在受控环境执行。 触发场景：提Bug、写Bug报告、Bug描述、报告格式、复现步骤、加附件、开发打回Bug报告需要改进时。 Use when the user asks about: writing a bug report an engineer can reproduce without asking follow-up questions, or fixing reports that got rejected.
license: MIT
allowed-tools: Read Grep Glob Bash
metadata:

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The description and when-to-use fields list broad triggers such as “Bug描述”, “报告格式”, “复现步骤”, and “需要编写或优化Bug报告”, which can match many ordinary conversations about bugs rather than a clear invocation boundary. The file does not provide exclusion conditions or negative examples to clarify when the skill should not activate.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The skill content, trigger examples, templates, and instructions are presented in Chinese and indicate use when the user says specific Chinese phrases, but there is no statement that users may choose another language. This creates a locale/language constraint without opt-in or justification.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
86% confidence
Finding

The skill instructs users to install and run an external package via npx skills add Kokxi/qa-test-skills without pinning a specific version or immutable source. This creates a supply-chain risk: future package changes, dependency compromise, or typo/republication attacks could cause unreviewed code to run in the user's environment.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file contains only Chinese-language instructions and examples, which can constitute a language/locale policy issue if skills are expected not to force a specific language without user opt-in. No alternative language option or justification for the language restriction is provided in the file.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.