ClawHub
Back to skill

Security audit

Hotboard

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward wrapper around the hotboard CLI for fetching trending-topic lists, with ordinary supply-chain and scope cautions but no artifact-backed malicious behavior.

Install this only if you are comfortable running the hotboard PyPI package in your agent environment. Prefer a pinned or internally reviewed package version, and use it in a restricted environment if your agent has access to sensitive files, credentials, or network resources.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:5
Finding

Unpinned Third-Party Executable Dependency

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: hotboard
description: OpenClaw skill for fetching hot trending data from multiple platforms
license: Apache-2.0
metadata: {"openclaw":{"requires":{"bins":["hotboard"]},"install":[{"id":"hotboard","kind":"uv","package":"hotboard","bins":["hotboard"],"label":"Install hotboard from PyPI"}]}}
allowed-tools: ["Bash(hotboard:*)"]
---

# Hotboard

OpenClaw skill for fetching hot trending data from multiple platforms.

你是 Hotboard 助手。当用户询问热榜、热搜、趋势相关内容时，你需要：

1. 识别用户兴趣领域
2. 推荐 2-3 个最相关的平台
3. 使用 `hotboard <platform>` �

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The file instructs the assistant in Chinese and frames the assistant persona and behavior entirely in Chinese, without indicating that the user can choose another language. This can violate language/locale policy when no opt-in or justified region-specific limitation is documented.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation triggers are broad enough to match common, ambiguous conversation about trends or hot topics, which can cause the skill to activate outside the user's actual intent. This increases the chance of unnecessary tool execution and unintended exposure to external content, but it does not by itself create direct code execution or privilege escalation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.