ClawHub
Back to skill

Security audit

新闻事实核查

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language news fact-checking guide with disclosed reference links and no executable, persistent, or privileged behavior.

Install this if you want a Chinese-language checklist and workflow for news fact-checking. Be aware that it points users to external websites and tools for verification, so source quality and privacy practices of those sites still matter.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 8)May include surrounding context.

md
---
AIGC:
    ContentProducer: Minimax Agent AI
    ContentPropagator: Minimax Agent AI
    Label: AIGC
    ProduceID: 353a1fa62d9e026ed1e119c32ab2e30b
    PropagateID: 353a1fa62d9e026ed1e119c32ab2e30b
    ReservedCode1: 3044022033cbb6252fc5d80f939363e84f1e1b3e96884b5b02e1aef41b9ec5ad2fe11a51022060e1cf1c3e77a5e9c11e2d3619ab01f2e739c9bf95964d2aa3e496050d27c8ae
    ReservedCode2: 3044022030b657224bf9bb8ebc476de998ac6527132e87ec57c7a0b090441f9b314cacaa0220437688bfc1238ae1b7eaca7c99de7f231ba0bd880c100ccc101443209b735a9b
description: 新闻事实核查与真伪辨别助手。当用户需要验证新闻真实性、查证消息来源、核实事件真伪时使用。包括：(1) 给定新闻内容进行真伪判断 (2) 提供的事实核查方法和步骤 (3) 帮助用户建立批判性思维习惯
name: news-fact-che

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The manifest description at L10 and the user-facing guidance beginning at L14 are entirely in Chinese, which effectively forces a specific language for interaction. Under the policy, language constraints should either be optional for the user or clearly justified as region-specific; neither is stated here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file presents all guidance exclusively in Chinese, including headings, descriptions, and checklist items. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly justified, which is not present here.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.