ClawHub
Back to skill

Security audit

幼儿园五大领域活动方案

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently generates printable kindergarten activity plans and does not show hidden access, persistence, credential use, or unsafe execution behavior.

Before installing, be aware that the skill may activate for broad child activity or experiment requests. It appears safe for its intended use, but users should choose output paths intentionally because the generator writes the requested HTML file.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger description is broad enough to activate on many generic parenting, kids, crafts, or activity-related requests, which can cause the wrong skill to take over user intent routing. Over-broad activation increases the chance of inappropriate tool use, irrelevant file generation, or suppression of better-matched educational skills, especially because the metadata explicitly says to auto-use the skill on a wide set of common phrases.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The explicit trigger table uses ambiguous keyword matching like '幼儿/孩子/幼儿园 + 活动/游戏' and broad English terms such as 'activities' or 'experiment' without scope guards. This can misroute common requests into this skill, creating unsafe autonomy in multi-skill environments and reducing user control over which capability is invoked.

Static analysis

No suspicious patterns detected.