ClawHub
Back to skill

Security audit

Autonomous Loops

Security checks for vulnerabilities and agentic risk

Overview

This skill is an instructional coding workflow guide with broad but disclosed autonomous-loop behavior and no executable payload or hidden data access.

Install this only if you want agents to apply autonomous coding-loop patterns, including cleanup passes, test runs, reviews, and possible commits. Users who prefer tight manual control should explicitly limit when the skill is invoked and whether commits are allowed.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill activates on very broad conditions such as iterative coding workflows, multi-step work, or when code quality cleanup is needed, without strong scoping or explicit user confirmation. In an autonomous agent setting, this can cause the skill to be invoked for many unrelated development tasks, increasing the chance of unsolicited looped execution, overreach, or inappropriate application of cleanup/review steps.

Natural-Language Policy Violations

Medium
Confidence
83% confidence
Finding
The title and introductory content present the skill in Chinese and may bias an agent toward Chinese-language behavior without any user opt-in or locale negotiation. While not directly enabling code execution or privilege abuse, this can degrade reliability, confuse users, and cause the agent to disregard the user's preferred language during security-relevant review or implementation tasks.

Static analysis

No suspicious patterns detected.