ClawHub
Back to skill

Security audit

QSR Labor Leak Auditor

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed restaurant labor-tracking assistant that stores and exports only operator-scoped business records through a companion memory engine.

Before installing, confirm you are comfortable storing confidential store sales, labor totals, average labor cost, and GM base-pay parameters in the host platform's store memory engine. Avoid entering personal employee identifiers or individual wage rates, and review the companion memory engine's retention, hard-deletion, authentication, and export controls.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Description-Behavior Mismatch

Low
Confidence
76% confidence
Finding
The manifest focuses on real-time labor decision support, planning, and mobile-friendly output, which suggests an analysis-and-guidance skill. The SKILL.md additionally defines explicit export functions for entries, weekly summaries, and audit logs, which are broader data-management behaviors not reflected in the manifest description.

Description-Behavior Mismatch

Low
Confidence
72% confidence
Finding
The manifest presents the skill primarily as a labor decision-support assistant with planning and summary features. The documentation requires storage of contextual audit trails, override logs, checkpoints, and historical records, which adds a recordkeeping/auditing function beyond what the manifest explicitly describes.

Skill Enumeration

Medium
Category
Agent Snooping
Content
Every record is tagged with a single store identifier and lives inside that store's namespace. Records never cross store boundaries. In multi-location deployments, each store has its own isolated labor history, goal tracker, and audit log. Cross-store rollups (see `ADAPTING THIS SKILL → Multi-location`) are produced by reading each store's namespace independently and combining the results at report time, not by merging the underlying records.

### Sibling skill access

Other skills in the QSR Operations Suite may read from this skill's records *only* through the same store-scoped namespace and *only* in read-only mode. Sibling skills do not modify, delete, or re-export labor or goal records.
Confidence
85% confidence
Finding
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.