ClawHub
Back to skill

Security audit

Pubtest

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent I Ching divination/reference skill, with the main caveat that it stores local reading history and statistics.

Install only if you are comfortable with readings being saved locally in the skill's history/statistics files. Avoid entering sensitive health, legal, financial, relationship, or dispute details unless you intend to keep a local record, and clear or disable the logs if privacy matters.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The invocation description is broad enough to trigger on a wide range of user requests about divination, interpretation, querying texts, and statistical analysis without clearly limiting when the skill should or should not activate. Over-broad routing can cause the agent to inappropriately engage this skill, increasing the chance of unnecessary collection, retention, or disclosure of sensitive personal questions users may ask in a spiritual or advisory context.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill documents persistent divination logging, including date, calendrical data, the subject of inquiry, line values, and resulting hexagrams, but does not warn users that their inputs may be stored. Because divination queries can reveal sensitive beliefs, concerns, health, finances, relationships, or disputes, silent retention creates a privacy risk and may violate data-minimization and transparency expectations.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The workflow explicitly includes writing records to CSV/JSON as part of normal operation, yet there is no explicit consent or warning to the user. This makes persistent storage a default side effect of using the skill, which is especially risky given the personal nature of the logged divination topics and derived interpretations.

Static analysis

No suspicious patterns detected.