ClawHub
Back to skill

Security audit

SDD Writing Plans

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Chinese-language planning helper that reads a design spec and writes a plan file only after user confirmation.

Install this if you want an SDD workflow that produces Chinese spec-plan.md files from existing spec-design.md documents. Before confirming the write step, review the generated task summary and file list because the skill may inspect relevant project files and then create a plan file in the selected spec directory.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The instruction "计划文件用中文撰写" requires the generated plan file to be written in Chinese, regardless of user preference. This is a language policy constraint expressed in natural language, and the file does not offer the user a choice or opt-in for language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill instructs the agent to output a fixed Chinese completion message. This forces a specific language for user-facing communication without an explicit opt-in or documented locale limitation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.