ClawHub
Back to skill

Security audit

The Minimalist Entrepreneur — skills based on The Minimalist Entrepreneur by Sahil Lavingia

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Markdown-only startup advice skill with no code execution, persistence, credential access, or hidden data movement.

Install this if you want startup and small-business coaching in this style. Treat it as general business guidance, not professional financial, legal, tax, or investment advice, and be aware it may be invoked for a wide range of business-decision questions because of its broad description.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The manifest description contains broad triggers such as 'starting a business,' 'validating an idea,' 'setting prices,' 'planning marketing,' and 'gut-checking any business decision,' which can match a wide range of ordinary business conversations. In agent ecosystems that auto-select skills from descriptions, this can cause the skill to activate in many contexts beyond the user's intent, increasing prompt-surface exposure and the chance that long embedded instructions steer responses unexpectedly.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.