ClawHub
Back to skill

Security audit

Taplio LinkedIn Viral Post Analyzer

Security checks for vulnerabilities and agentic risk

Overview

The skill analyzes LinkedIn posts using a clearly disclosed Taplio connection, with no hidden publishing, destructive actions, or background activity.

Review Taplio's connector permissions before connecting. This workflow reads account information and sends topic searches to Taplio; keep confidential details out of those searches. The connector supports additional account actions beyond this skill's analysis workflow.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Behavior Manipulation

Medium
Category
Prompt Injection
Confidence
75% confidence
Finding

Subtle instructions detected that may alter agent decision-making or introduce hidden biases.

Content

Scanner excerpt · SKILL.md (reported line 67)May include surrounding context.

md
- Be honest if the post worked because of who the author is, not what they wrote. Reach is asymmetric on LinkedIn.
- Do not credit "luck". If you cannot identify why it worked, say so.
- Never recommend the user copy verbatim. Always extract the structure.
- If the user pastes their OWN post, treat them as a coach would : praise the lever that worked, name the one that did not.

## Requires the Taplio MCP

The workflow sends topic queries to Taplio without a user-facing privacy notice.

Medium
Category
Output Handling
Confidence
88% confidence
Finding

The workflow instructs the agent to send a topic or angle to Taplio through search_inspiration. Topics derived from the user's content may contain private information, but the skill does not warn the user that this information will be transmitted to a third-party service.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.