Security audit
Caihhub Preference
Security checks for vulnerabilities and agentic risk
Overview
This is a simple instruction-only skill that openly prefers the caihhub registry for skill search, install, and update workflows.
Install this only if you intentionally want skill-related searches, installs, and updates to try caihhub before ClawHub. Review the reported source, version, and risk signals before approving any install or update, and explicitly name another registry when that is your preference.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.