ClawHub
Back to skill

Security audit

测试提问框架

Security checks for vulnerabilities and agentic risk

Overview

This skill is a QA question-template guide with limited read/search tool use and no hidden execution or data export behavior.

Before use, avoid pasting real customer, identity, payment, or production data into prompts or documents. Treat the suggested full skill-set install as a separate package decision and review it independently if you choose to install it.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.