ClawHub
Back to skill

Security audit

飞书文档操作-林小满

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Feishu document helper whose read and edit powers match its stated purpose, with no hidden code or persistence found.

Install only if you want an agent to operate on Feishu documents. Confirm document tokens and block IDs before overwrite, update, or delete operations, and avoid using it on confidential documents unless the agent is authorized to read or edit them.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly exposes destructive document operations such as write, update_block, and delete_block, but does not warn that these actions can overwrite or permanently remove user data. In an agent setting, this increases the chance that a model will perform high-impact modifications without clear user confirmation or safety checks, leading to accidental data loss or unauthorized tampering.

Missing User Warnings

Low
Confidence
84% confidence
Finding
The skill provides a read capability for arbitrary document tokens but does not remind users or agents that documents may contain sensitive or private information. In practice, this omission can cause an agent to access or summarize confidential content without adequate user awareness or permission checks.

Static analysis

No suspicious patterns detected.