ClawHub
Back to skill

Security audit

脚本编写器（支持断点继续执行）

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed batch-work manager that writes scoped progress, logs, checkpoints, and generated batch-script helpers for long-running file tasks.

Install this only if you want the agent to manage long-running batch work in a repository. Expect it to create or update work/ progress, state, and log files, and to generate batch scripts that write to manifest-declared output paths. Review manifests and output directories before full runs, especially in sensitive repositories.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill explicitly states it will write project files under work/ and generate batch scripts, but it does not declare corresponding permissions. Undeclared file-write capability weakens user and platform visibility into what the skill can modify, increasing the risk of unexpected state changes, script creation, or misuse if the skill is invoked in a sensitive repository.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger conditions are broad enough that the skill may activate on loosely related cues like '大量文件' or '长任务' without a strong confirmation that the user actually wants filesystem-writing task orchestration. Because this skill creates and updates workspace state, logs, and batch scripts, unintended invocation can alter project files or steer the session into higher-risk automation than necessary.

Static analysis

No suspicious patterns detected.