ClawHub
Back to skill

Security audit

saas-decomposer

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent SaaS analysis skill that may browse public SaaS pages and write analysis outputs, with no evidence of hidden execution or malicious behavior.

Install this if you want an agent to research public SaaS services and produce AI replacement plans. Be aware it may fetch third-party webpages and save analysis event files, so avoid using it with confidential strategy details unless you are comfortable with those outputs being stored locally.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
96% confidence
Finding
The manifest description includes very broad trigger phrases such as 'decompose', 'internalization', and 'build this service with AI', which can match ordinary product, strategy, or brainstorming requests and cause the skill to activate outside the user's intended scope. In this skill's context, unintended activation is more dangerous because the skill is designed to crawl external sites, analyze competitors, and generate output artifacts, so a mistaken trigger can lead to unnecessary network access and side effects.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill description and usage flow describe crawling public SaaS pages and writing analysis results to event files, but do not warn the user that external requests and persistent outputs may occur. In this context, the omission increases risk because users may invoke what sounds like a planning/analysis skill without realizing it can contact third-party sites and create stored artifacts containing potentially sensitive business analysis.

Static analysis

No suspicious patterns detected.