ClawHub
Back to skill

Security audit

JSON Param Parser

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local JSON field lookup helper with some overstated documentation but no evidence of hidden, destructive, persistent, network, or credential-related behavior.

Install only if you want a Chinese-language local helper for finding JSON field paths and values. Do not rely on the documented SQL extraction, formatted JSON, or enum-summary features unless the publisher updates the implementation.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (5)

Tp4

High
Category
MCP Tool Poisoning
Confidence
97% confidence
Finding
代码的核心功能与“JSON层级解析、输入JSON+参数名、输出参数完整层级路径”这部分基本一致，但声明中的几个重要输出并未实现。代码没有打印格式化后的完整JSON，也没有生成任何SQL提取建议或 get_json_object 表达式。与此同时，所谓“枚举值”在实现中只是返回命中的字段值，并不做去重枚举、值域汇总或枚举分析。因此，声明对工具输出能力有明显夸大，属于描述与实际行为不一致。未见越权访问、网络、系统敏感资源等额外未声明高风险能力；主要问题是功能描述比实际实现更多。

Lp3

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding
Without declared permissions the skill's intent is opaque and cannot be validated.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger list includes `json解析`, which is broad and could overlap with many ordinary requests about JSON parsing rather than this specific skill's behavior of locating parameter paths and generating SQL extraction suggestions. The documentation does not provide constraints, negative examples, or context limiting when this trigger should or should not invoke the skill.

Description-Behavior Mismatch

Medium
Confidence
97% confidence
Finding
The manifest says the skill outputs the full parameter path, enum values, formatted JSON, and SQL extraction guidance using get_json_object syntax. In the implementation, main() only prints matched parameter paths and values or similar-key suggestions; there is no code that formats and outputs the full JSON document, derives enum sets, or constructs SQL extraction expressions.

Natural-Language Policy Violations

Low
Confidence
91% confidence
Finding
The module docstring and all user-facing help/output strings are written only in Chinese, which imposes a language choice on users without opt-in. Under the policy, language-specific behavior should either offer a choice or clearly document a justified regional constraint, neither of which appears in this file.

Static analysis

No suspicious patterns detected.