ClawHub
Back to skill

Security audit

秒懂

Security checks for vulnerabilities and agentic risk

Overview

This is a simple Chinese-language explanation template with no code execution, data access, persistence, or hidden behavior.

Install if you want a Chinese-oriented template for explaining concepts with analogies and ASCII diagrams. Consider whether Chinese default phrasing matches your workflow; no special security precautions are indicated beyond normal review of generated explanations.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
92% confidence
Finding
The skill metadata and instructions are written to produce Chinese output by default and do not offer any mechanism to adapt to the user's preferred language. This can cause user-intent mismatch, reduce usability, and create compliance or accessibility issues in multilingual environments, though it does not directly enable code execution or data exfiltration.

Static analysis

No suspicious patterns detected.