ClawHub
Back to skill

Security audit

电商详情页生成器 E-Com Copywriter

Security checks for vulnerabilities and agentic risk

Overview

This is a simple e-commerce copywriting skill, but it can prompt unsupported reviews, sales numbers, scarcity claims, and “real” experiences that may mislead buyers if not verified.

Install only if users will verify every factual marketing claim before publishing. Do not let the skill invent testimonials, sales figures, inventory counts, discounts, guarantees, before/after results, medical effects, or regulated-product claims; provide verified evidence or omit those sections.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

other

Warning
Location
SKILL.md:64
Finding

Generation of Unverified Reviews, Usage Experiences, Sales Figures, and Scarcity Claims

Content
View full analysis

Vulnerability Details

File Location: SKILL.md, lines 64-67, 89-90, 98-102, 123, and 125
Vulnerability Type: other: Deceptive Content Generation
Risk Level: Medium

Complete Vulnerable Excerpts

The following English-rendered excerpts correspond to the identified instructions in the Chinese-language source:

text
Lines 64-67:
[Trust endorsement section]
→ Materials/ingredients/process description (make users perceive value)
→ User reviews/sales data (make users feel safe)

[Call-to-action section]
→ Limited-time discount/low inventory (create urgency)
→ After-sales protection/return promise (eliminate concerns)
text
Lines 89-90:
35-45 seconds: Usage experience/comparison results (create authenticity)
45-55 seconds: Price/discount explanation (create urgency through limited time and quantity)
text
Lines 98-102:
[Opening]: Real usage scenario that creates resonance
[Body]: Personal real experience, including:
  - Before/after comparison
  - Three real usage scenarios
  - One unexpected benefit/honest disadvantage
text
Lines 123 and 125:
Numeric persuasion: "Already helped 1,000+ sellers" is better than "many people use it"
Urgency: "Only 30 items remaining" is better than "limited inventory"

Technical Analysis

The Skill asks users only for general product information such as the product name, principal characteristics, target audience, price range, and differentiating features. It does not require supporting evidence for customer reviews, sales volume, remaining inventory, usage tests, before-and-after results, discount deadlines, return promises, or claimed adoption figures.

Despite that limitation, its generation framework directs the agent to produce supposedly real personal experiences, user reviews, sales data, comparison effects, and specific scarcity claims. The examples involving “1,000+ sellers” and “only 30 items remaining” en ...[truncated 2007 chars]

Remediation
View remediation

Remediation Suggestions

  1. Add explicit evidence fields for reviews, sales volume, inventory, promotion deadlines, test results, guarantees, and return policies.
  2. Prohibit the agent from inventing testimonials, personal experiences, usage results, numerical adoption claims, stock counts, certifications, discounts, or warranties.
  3. Require every factual marketing claim to be directly traceable to user-provided evidence.
  4. When evidence is unavailable, omit the relevant section or emit an unmistakable placeholder such as [verified sales figure required].
  5. Replace instructions to create “real” experiences with instructions to describe product scenarios hypothetically and label them accordingly.
  6. Use non-factual calls to action unless the seller supplies verifiable promotion and inventory information.
  7. Add a final validation pass that flags unsupported numbers, testimonials, before-and-after claims, scarcity language, and guarantees.
  8. Require heightened compliance review for regulated products, including medicines, medical devices, financial products, and insurance.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill explicitly encourages conversion tactics such as urgency cues, social proof, and trust claims, but it does not warn users against fabricating claims, misleading scarcity, or making non-compliant statements for regulated or sensitive product categories. In an e-commerce copywriting context, this omission can facilitate deceptive marketing, especially for products like cosmetics, food, maternal/infant goods, or quasi-medical items where platform and legal rules are stricter.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.