ClawHub
Back to skill

Security audit

build-developer-faq-page

Security checks for vulnerabilities and agentic risk

Overview

This is a low-risk, instruction-only skill for drafting developer FAQ content and it does not request credentials, installs, local file access, or system changes.

Reasonable to install if you want FAQ drafting help. Review generated content for factual accuracy, sensitive business details, and source quality before publishing, especially when web_search is used.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.