ClawHub
Back to skill

Security audit

阶段报告与续课助手

Security checks for vulnerabilities and agentic risk

Overview

This skill drafts student progress reports using disclosed, narrowly scoped records and keeps teachers in control of saving evidence and sharing reports.

Use authorized student records, check consent settings, and review reports before sharing them. Confirm that your host platform enforces the stated access limits and supports the separate archive-deletion workflow. SECURITY_BASELINE.md is referenced but absent; the main privacy restrictions are also stated directly in the bundled instructions.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Incomplete referenced artifact analysis

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 217)May include surrounding context.

md
五档取值见 shared/vocab.md §6

Incomplete referenced artifact analysis

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 228)May include surrounding context.

md
仍在跟进：[知识点]（弱项状态见 shared/vocab.md §4）

Incomplete referenced artifact analysis

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 565)May include surrounding context.

md
- `shared/vocab.md` — 掌握度五档、弱项五档、置信度、授权位（唯一来源）