ClawHub
Back to skill

Security audit

UI Scanner — Website Design System Extraction

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward website UI analysis guide that fetches a user-provided URL and writes a local design-spec file.

Install only if you are comfortable with the agent fetching the websites you provide and saving a design summary file in the workspace. Use it on public or authorized pages, and check for an existing `{domain}_design.md` file if overwrites matter.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

The skill explicitly states that it will write results to a local file, but it does not warn the user that running the skill modifies the filesystem. That creates a transparency and consent issue: users may invoke what appears to be an analysis-only skill without realizing it persists artifacts, which can overwrite files, leak scanned data into the workspace, or violate expectations in restricted environments.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.