ClawHub
Back to skill

Security audit

GenAI CyberSec

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent roadmap-generation API description; it asks for organizational security context but does not include hidden execution, persistence, or destructive behavior.

Before installing, be aware that using this skill may send organizational security posture, challenges, goals, budget, and optional contact or user identifiers to the API. Use pseudonymous identifiers and omit unnecessary sensitive details when possible.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill explicitly solicits sensitive organizational context and user-identifying data such as organization name, email, role, department, user ID, and session identifiers, but provides no privacy notice, data handling constraints, retention guidance, or minimization warning. In a cybersecurity context, this metadata can reveal internal structure, maturity gaps, and contact details that increase exposure if logged, retained, shared with third parties, or disclosed through compromise.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The schema requests and duplicates potentially sensitive identifiers and contact data, including session IDs, user IDs, and email, without any notice about sensitivity, minimization, or handling expectations. In an agent-skill context, this increases the chance that upstream systems or users will transmit unnecessary personal or tracking data to the API, creating privacy, correlation, and retention risk if the service is over-permissioned, logged broadly, or compromised.

Content

No source excerpt is available for this finding.

Vague Triggers

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

This is a manifest-style OpenAPI file, so vague-trigger checks apply. The operation is described generically as 'Generate Roadmap' for 'personalized cybersecurity transformation roadmap' but provides no narrower activation conditions, exclusions, or contextual limits, which can make invocation matching overly broad in systems that rely on manifest descriptions.

Content

No source excerpt is available for this finding.