ClawHub
Back to skill

Security audit

Hijack Defender

Security checks for vulnerabilities and agentic risk

Overview

This Markdown-only skill is purpose-aligned for Amazon hijack enforcement, but it needs review because it gives test-buy, legal-demand, and evidence-retention guidance without enough compliance and privacy guardrails.

Review this skill carefully before installing or using it. Use only accounts and shipping addresses you are authorized to control, verify marketplace policy and legal compliance before test buys, have legal counsel review enforcement letters, and store evidence with redaction, restricted access, and a retention/deletion plan.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill instructs users to perform a test buy using a separate Amazon account and a neutral shipping address without warning that this can involve deceptive conduct, may violate marketplace terms, and requires careful handling of personal and shipping data. In this context, the omission can lead users to impersonate independent buyers, expose third-party address information, or trigger account enforcement while collecting evidence.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file provides ready-to-send cease-and-desist templates that make legal and factual assertions about third parties, including infringement, counterfeiting, and damages, without a clear upfront warning to verify the facts and obtain legal review before use. In this skill context, users may treat the templates as operational guidance and send inaccurate or overreaching notices, creating legal, compliance, and reputational risk for both the user and targeted third parties.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The guide explicitly instructs users to collect and retain sensitive order-related and address-linked information, including shipping details and order identifiers, but provides no privacy, minimization, access-control, or retention safeguards. In a business workflow, this can lead to unnecessary storage of personal data belonging to employees, customers, or third parties, increasing exposure in the event of mishandling, insider access, or breach.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.