ClawHub
Back to skill

Security audit

Data Viz Specialist

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a disclosed career-roadmap API integration, with privacy considerations around sending career assessment data to an external service.

Before installing, avoid sending unnecessary personal details, use a pseudonymous sessionId when possible, and confirm the provider's privacy, retention, and data-sharing practices if the assessment contains sensitive career or identity information.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill documentation instructs users to submit assessment data together with persistent identifiers like sessionId, userId, and timestamps, but provides no privacy notice, data minimization guidance, retention statement, or warning about transmitting potentially sensitive career-profile information to a third-party service. This increases the risk of unnecessary collection and disclosure of personal or behavioral data, especially because the service appears externally hosted and the metadata is sufficient to correlate requests across sessions.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
82% confidence
Finding

The skill references an external API endpoint, meaning user-supplied assessment and identifier data will be transmitted outside the local trust boundary to api.mkkpro.com. External transmission is not inherently malicious, but in this context it becomes risky because the skill handles user-related metadata and offers no accompanying verification, trust, privacy, or security assurances for the destination service.

Content

Scanner excerpt · SKILL.md (reported line 232)May include surrounding context.

md
## References

- **Kong Route:** https://api.mkkpro.com/career/data-viz-specialist
- **API Docs:** https://api.mkkpro.com:8089/docs

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The API schema explicitly collects assessment data, session identifiers, timestamps, and optional user identifiers, which are privacy-relevant data elements. The skill metadata and API description provide no notice about data handling, retention, sharing, or privacy expectations, creating an information-handling risk and increasing the chance users or integrators send sensitive profiling data without informed consent.

Content

No source excerpt is available for this finding.