ClawHub
Back to skill

Security audit

ym-excel-formula-helper

Security checks for vulnerabilities and agentic risk

Overview

This skill is a plain-text Excel/WPS formula helper with disclosed limits and no code execution, network access, persistence, or file modification behavior.

Install this if you want Chinese Excel/WPS formula help. Be aware it may trigger on broad spreadsheet or function wording, so for programming functions or non-spreadsheet tasks you may need to direct the agent to use another skill.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The description says to use the skill when the user mentions "函数怎么写", which is a generic phrase that can refer to many kinds of functions, not specifically Excel formulas. Because the trigger guidance does not provide exclusions or scope limits here, it could cause unintended invocation in non-Excel contexts.

Vague Triggers

Medium
Confidence
81% confidence
Finding
"表格公式" can refer to formulas in many spreadsheet-like tools or generic table-processing contexts, not necessarily this skill's exact Excel/WPS formula workflow. The file does not include negative examples or stricter activation boundaries to prevent collisions with adjacent spreadsheet or data-processing skills.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The "何时使用" section allows activation when a user merely describes a table-calculation need in natural language, which is broad enough to overlap with other spreadsheet, analytics, or data-cleaning skills. There are some capability boundaries later, but this section itself does not clearly distinguish when the skill should not activate.

Intent-Code Divergence

Medium
Confidence
92% confidence
Finding
L133 声称“数组公式只给动态数组版本（Excel 365 / WPS 最新版）并标注版本要求，不展开旧版 CSE 写法”，但前文 L116 明确给出了旧版多条件查找的数组公式 `INDEX(...MATCH(...))`，并说明“旧版数组公式需 Ctrl+Shift+回车”。这是文档内部对技能实际交付内容的直接冲突，属于意图与实现说明不一致。

Natural-Language Policy Violations

Medium
Confidence
90% confidence
Finding
The text states that upon receiving a Chinese request, the skill should search this library first and return standardized answers, implying a fixed Chinese-language operating mode. This is a natural-language locale constraint and there is no opt-in, alternative language path, or justification that the skill is intentionally region-specific.

Static analysis

No suspicious patterns detected.