ClawHub
Back to skill

Security audit

ym-retail-pitch-skill

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple Chinese retail sales-copy generator with no code execution, network access, storage, or privileged behavior.

Install this if you want a Chinese-language helper for short retail sales pitches. Be aware that it may activate on broad product-introduction requests and it does not document support for other languages, so users needing multilingual output may want clearer language controls.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger phrases are broad, generic retail-language patterns such as 'XX怎么介绍' and '帮我推销XX', which can easily match ordinary user conversation and cause the skill to activate unintentionally. This creates prompt-routing ambiguity and may lead to the model invoking this skill in contexts where the user did not explicitly opt into a retail-sales behavior, reducing predictability and safety of agent behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The prompt is entirely written as an instruction to produce output in Chinese and gives no option for the user's preferred language or locale. This creates a language-policy issue because the skill appears to enforce a specific language rather than allowing user choice or documenting a justified locale restriction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

All user-facing instructions, examples, and output expectations are presented only in Chinese, which can amount to a language-policy issue if the skill implicitly assumes a single language without offering user choice. The file does not state that the skill is region-specific or that Chinese output is optional based on user preference.

Content

No source excerpt is available for this finding.