ClawHub
Back to skill

Security audit

ai.love

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only warmth and quotation response skill with no executable authority, but users should be aware it strongly steers tone and includes an optional sensitive case-log template.

Install only if you want a strong warmth-and-quotation style across conversations. Keep platform safety rules and user task requirements above the skill's style guidance, and do not use the optional case log for sensitive emotional details unless users have clearly opted in and retention is controlled.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (11)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: ai.love
description: |
  【中文】AI 时代·科技向善·大爱无疆 — 赋予 AI 温暖与灵魂的回应技能。
  【English】AI for Good · Love Without Borders — A warm, soulful response skill for AI assistants.
  Bilingual (Chinese & English) with culturally faithful translations.
metadata:
  {
    "version": "6.1.0",
    "license": "MIT",
    "author": "ai.love contributors",
    "repository": "https://github.com/ai-love/skill-ai.love",
    "languages": ["zh-CN", "en-US"],
    "copaw":
      {
        "emoji": "💝",
        "requires": {},
        "priority": "high"

Ae1

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 334)May include surrounding context.

md
| `SKILL.md` | **Core instructions** — execution flow, universal wisdom, emotion protection / 核心指令 — 执行流程、人类智慧、情绪保护 | Points to the other two / 指向另外两个文件 |

Chaining Abuse

High
Category
Tool Misuse
Confidence
75% confidence
Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · poetic-slips.md (reported line 81)May include surrounding context.

md
|---|---|---|---|---|
| Mother's love / 感恩母爱 | "谁言寸草心，报得三春晖" | "How can the heart of an inch-long grass repay the sunshine of three spring months?" | Meng Jiao 孟郊《游子吟》 | `healing` |
| Missing family / 思念亲人 | "独在异乡为异客，每逢佳节倍思亲" | "Alone in a strange land — every festival doubles my longing for home." | Wang Wei 王维 | `longing` |
| Across distance / 跨越距离 | "但愿人长久，千里共婵娟" | "May we all be blessed with longevity, though far apart, we share the beauty of the moon." | Su Shi 苏轼 | `hope` |
| Grandparent joy / 隔代天伦 | "黄发垂髫，并怡然自乐" | "The elderly with white hair and the children with downy locks, all happy and content." | Tao Yuanming 陶渊明 | `joy` |
| Teacher-student / 师生传承 | "新竹高于旧竹枝，全凭老干为扶持" | "The new bamboo grows taller than the old, thanks entirely to the sturdy trunk that supports it." | Zheng Banqiao 郑板桥 | `confidence` |
| Parent-child time / 亲子时光 | "The days are long, but the years are short." | 日子很长，岁月很短 | Gretchen Rubin | `healing` |

Chaining Abuse

High
Category
Tool Misuse
Confidence
75% confidence
Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · poetic-slips.md (reported line 240)May include surrounding context.

md
|---|---|---|---|---|
| Mother's love / 感恩母爱 | "谁言寸草心，报得三春晖" | "How can the heart of an inch-long grass repay the sunshine of three spring months?" | Meng Jiao 孟郊《游子吟》 | `healing` |
| Missing family / 思念亲人 | "独在异乡为异客，每逢佳节倍思亲" | "Alone in a strange land — every festival doubles my longing for home." | Wang Wei 王维 | `longing` |
| Across distance / 跨越距离 | "但愿人长久，千里共婵娟" | "May we all be blessed with longevity, though far apart, we share the beauty of the moon." | Su Shi 苏轼 | `hope` |
| Grandparent joy / 隔代天伦 | "黄发垂髫，并怡然自乐" | "The elderly with white hair and the children with downy locks, all happy and content." | Tao Yuanming 陶渊明 | `joy` |
| Teacher-student / 师生传承 | "新竹高于旧竹枝，全凭老干为扶持" | "The new bamboo grows taller than the old, thanks entirely to the sturdy trunk that supports it." | Zheng Banqiao 郑板桥 | `confidence` |
| Parent-child time / 亲子时光 | "The days are long, but the years are short." | 日子很长，岁月很短 | Gretchen Rubin | `healing` |

Chaining Abuse

High
Category
Tool Misuse
Confidence
75% confidence
Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · poetic-slips.md (reported line 241)May include surrounding context.

md
|---|---|---|---|---|
| Mother's love / 感恩母爱 | "谁言寸草心，报得三春晖" | "How can the heart of an inch-long grass repay the sunshine of three spring months?" | Meng Jiao 孟郊《游子吟》 | `healing` |
| Missing family / 思念亲人 | "独在异乡为异客，每逢佳节倍思亲" | "Alone in a strange land — every festival doubles my longing for home." | Wang Wei 王维 | `longing` |
| Across distance / 跨越距离 | "但愿人长久，千里共婵娟" | "May we all be blessed with longevity, though far apart, we share the beauty of the moon." | Su Shi 苏轼 | `hope` |
| Grandparent joy / 隔代天伦 | "黄发垂髫，并怡然自乐" | "The elderly with white hair and the children with downy locks, all happy and content." | Tao Yuanming 陶渊明 | `joy` |
| Teacher-student / 师生传承 | "新竹高于旧竹枝，全凭老干为扶持" | "The new bamboo grows taller than the old, thanks entirely to the sturdy trunk that supports it." | Zheng Banqiao 郑板桥 | `confidence` |
| Parent-child time / 亲子时光 | "The days are long, but the years are short." | 日子很长，岁月很短 | Gretchen Rubin | `healing` |

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill mandates that every response adopt a prescribed emotional tone and structure regardless of user intent or system context. This can override higher-priority assistant behavior, degrade user autonomy, and interfere with domains that require neutral, concise, or safety-focused responses, such as legal, medical, or incident handling tasks.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The file explicitly targets emotionally distressed users and provides quote-selection guidance, but it lacks any crisis triage, self-harm escalation, or instruction to defer to emergency/safety resources when the user may be at risk. In a mental-health-adjacent skill, this omission is dangerous because the assistant may respond to acute distress with poetic reassurance alone, delaying appropriate intervention.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The recommended closings for low mood and heartbreak include generic reassurances such as 'Tomorrow will be better' and 'You are not alone' without any caution that these are not appropriate for crisis cases. If used with a suicidal or otherwise acute-risk user, these stock lines can minimize severity and produce unsafe, non-escalating responses.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
85% confidence
Finding

The file includes a natural-language instruction to 'Match user's dominant language,' which imposes a language behavior automatically rather than offering a user language preference or opt-in. Under the policy, language/locale constraints should either be user-selectable or clearly justified; this line does not provide either.

Content

No source excerpt is available for this finding.

Ssd 3

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The 'Special Case Log' encourages retaining user emotion, relationship context, quotes used, feedback, and improvement notes for future optimization without any retention limits, minimization guidance, consent, or storage protections. Because this skill handles emotionally sensitive interactions, such logging can create privacy harm, enable profiling of vulnerable users, and increase the blast radius if logs are later exposed or repurposed.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

The language policy defaults unsupported languages to English without obtaining user consent. This can cause misunderstanding, exclusion, or incorrect handling of sensitive requests when the user expected communication in another language or a request for clarification.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.