ClawHub
Back to skill

Security audit

Shenzhen Metro

Security checks for vulnerabilities and agentic risk

Overview

This is a Shenzhen Metro lookup skill with no executable payload, no hidden persistence, and only a low-risk API key handling note for optional Amap use.

Before installing, treat the bundled transit data as unofficial and verify important trips with Shenzhen Metro official sources. If you use the optional Amap API feature, avoid saving a real API key in shared project files and be careful not to paste authenticated URLs into logs, commits, or support messages.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Note
Location
data/metro_facts.json:2
Finding

Insecure API Key Storage and Transmission Guidance

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The entire README, including the usage examples and invocation guidance, is written only in Chinese and presents the skill as a general-purpose subway query tool rather than a clearly documented region- or language-restricted skill. Under the policy, forcing a specific language without user opt-in or an explicit justified locale constraint is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The string at L004 is written only in Chinese and provides no alternative language or opt-in, which can constitute a locale/language policy issue under the natural-language policy rules. Because this is a user-directed note rather than region-justified enforcement with an explicit choice, it may exclude non-Chinese users.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.