ClawHub
Back to skill

Security audit

Content Repurposer

Security checks for vulnerabilities and agentic risk

Overview

This skill locally rewrites user-provided content into social and marketing formats, with disclosed local history/settings storage and no evidence of posting, network access, or hidden execution.

Before installing, understand that the skill may save the content you paste, generated outputs, and usage stats locally under ~/.openclaw/content-repurposer/. Avoid using it with highly sensitive drafts unless you are comfortable with that local history, or clear the skill's local files when finished.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Session Persistence

Medium
Category
Rogue Agent
Confidence
60% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: content-repurposer
description: When user asks to repurpose content, convert blog to tweets, turn article into LinkedIn post, create Twitter thread from text, make Instagram caption from blog, convert content to email newsletter, create YouTube description from script, generate TL;DR from article, turn podcast notes into posts, or any content format conversion task. 15-feature AI content repurposer that transforms one piece of content into 7+ formats. All data stays local — NO external API calls, NO network requests, NO data sent to any server. Does NOT post to any platform — generates text for user to copy.
metadata: {"clawdbot":{"emoji":"♻️","requires":{"tools":["read","write"]}}}
---

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The activation trigger includes the generic term "repurpose," which can match many ordinary user requests outside the intended skill scope. This increases the chance of unintended invocation, causing the skill to process unrelated content and perform file writes or persistence actions without the user explicitly opting into this specific skill.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

Including the trigger "help" is overly broad because users commonly say "help" in many unrelated contexts. This can cause accidental activation of the skill and unintended access to local history/settings behavior, especially since the skill is authorized to read and write local files.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.