ClawHub
Back to skill

Security audit

Meeting Minutes Pro

Security checks for vulnerabilities and agentic risk

Overview

This meeting-minutes skill is a straightforward markdown template for drafting internal meeting notes, with a privacy caution but no executable code or hidden behavior.

Before installing or using this skill, treat transcripts, recordings, attendee lists, and decisions as potentially sensitive. Share final minutes only to an approved internal destination, confirm the distribution list, and avoid attaching raw source material unless the participants and organization permit it.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill explicitly instructs the agent to publish final minutes and include attachments such as recordings and transcripts, but it provides no mandatory privacy gate, consent check, or sensitivity review before distribution. Because meeting minutes often contain internal business information, names, decisions, and potentially sensitive discussion content, this can lead to unintended disclosure to broader audiences or storage in inappropriate channels.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.