ClawHub
Back to skill

Security audit

Daily Social Routine

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed social-media routine skill that may open logged-in social accounts for checks, but it has no hidden code, install-time execution, or persistence.

Install this only if you are comfortable with an agent opening social-media pages in your browser, potentially using logged-in sessions, and reading routine account metrics or notifications. Confirm manually before posting comments, accepting LinkedIn connections, or storing logs in any database.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger list includes multiple natural-language phrases such as "daily social routine," "social media check," and "do my social today," which are broad enough to be invoked unintentionally in normal conversation. Because this skill performs browser-based status checks and proposes platform actions, accidental activation could cause unanticipated access to social accounts or collection of account metrics without clear user intent.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly directs browser automation to navigate to Reddit and Twitter/X account pages, extract karma and notification data, and scan engagement opportunities, but it does not present any upfront warning about privacy, authenticated session use, or possible platform/account consequences. In context, this means the skill may access live social media accounts and collect personal/account data or interact in ways the user did not fully anticipate.