ClawHub
Back to skill

Security audit

observability-and-instrumentation

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only observability skill whose guidance is purpose-aligned and does not show hidden execution, persistence, credential access, or exfiltration behavior.

Before installing, be aware that the skill text is mostly Chinese and has visible encoding damage, so some guidance may be harder to read. Security-wise, it appears to be a normal observability guidance skill with examples for logging, metrics, traces, and alerts; review any code changes it proposes as you would any instrumentation change, especially to avoid logging secrets or sensitive personal data.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Hidden Instructions

High
Category
Prompt Injection
Content
---
name: observability-and-instrumentation
version: 1.0.0
description: "Add observability and instrumentation to applications �� metrics, logs, traces, and dashboards"
Confidence
60% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Natural-Language Policy Violations

Medium
Confidence
96% confidence
Finding
The skill body is written in Chinese from the title onward, and it instructs the agent entirely in that language. There is no opt-in, user choice, or stated regional/compliance reason for this locale restriction, which creates a language-policy issue under the natural-language policy category.

Static analysis

No suspicious patterns detected.