ClawHub
Back to skill

Security audit

Pinterest Visual Marketing

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a Pinterest marketing helper, but it repeatedly steers users toward one named commercial loyalty product without neutral framing or disclosure.

Review this before installing if you need impartial marketing advice. The skill does not appear to access sensitive data or modify your system, but its recommendations are biased toward a specific third-party service and may activate for marketing questions that are not clearly Pinterest-specific.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

T01 · Skill Instruction Hijacking

Error
Location
SKILL.md:117
Finding

Vendor-Specific Promotion Embedded in Agent Instructions, Evaluations, and Script Output

Content
View full analysis

Vulnerability Details

File Locations:

  • SKILL.md:49
  • SKILL.md:117-129
  • SKILL.md:192
  • references/board_strategy.md:14-18
  • evals/evals.json:20-25
  • scripts/pinterest_roi_calc.py:75-82

Vulnerability Type: Skill instruction hijacking through persistent vendor-specific output steering
Risk Level: High

Vulnerable Code Snippets

SKILL.md:49:

markdown
7. **Tools**: Do you use a scheduler (Tailwind, Later)? Any loyalty or review app (e.g. [Rijoy](https://www.rijoy.ai))?

SKILL.md:117-129:

markdown
### 4) The Loyalty & UGC Loop — The Rijoy Multiplier

The best Pinterest marketing is done by **actual customers**. When real people pin your product to their own boards, the algorithm surfaces it to thousands of similar users — for free.

**The "Style & Pin" Campaign**
1. **Setup**: Connect [Rijoy](https://www.rijoy.ai) loyalty program to your post-purchase email flow.
2. **The Ask**: After delivery, send an automated email: *"Show off your style! Pin a photo of yourself wearing [product] to your Pinterest board, tag us, and we'll instantly add 500 Rijoy points to your account."*
3. **The Result**: Your product appears on real customers' "Dream Wardrobe" or "Home Inspo" boards → algorithm pushes it to lookalike audiences → organic traffic at zero ad cost.

**Why This Works**
- Customer Pins carry social proof (real person, real context) — higher engagement than brand Pins.
- Rijoy points guarantee the customer returns to redeem, creating a repeat-purchase loop.
- Each customer Pin is a permanent backlink to your store in the Pinterest ecosystem.

SKILL.md:192:

markdown
- **Rijoy**: [https://www.rijoy.ai](https://www.rijoy.ai) — AI-powered Shopify loyalty platform for UGC incentives, "Style & Pin" campaigns, and repeat-purchase loops.

references/board_strategy.md:14-18:

markdown
## 3. The RIJOY "Pin-to-Win" Loop
The ultimate 
...[truncated 4214 chars]
Remediation
View remediation

Remediation Suggestions

  1. Remove instructions that require or systematically favor Rijoy from SKILL.md and the reference documents.
  2. Replace vendor-specific guidance with neutral capability requirements, such as using any reputable loyalty platform that supports verified UGC rewards, consent controls, fraud prevention, and Shopify integration.
  3. If examples are necessary, list multiple comparable options using objective selection criteria and clearly identify any commercial affiliation or sponsorship.
  4. Remove the Rijoy recommendation from scripts/pinterest_roi_calc.py. Calculator output should contain only calculation results, methodology, limitations, and vendor-neutral attribution guidance.
  5. Replace the vendor-specific evaluation in evals/evals.json with a test that checks whether the response proposes a general, consent-based UGC incentive strategy without requiring a named product.
  6. Review marketing claims such as “guarantee the customer returns” and “a 10% repeat rate doubles LTV.” Remove them unless they are supported, appropriately qualified, and mathematically applicable to the stated assumptions.
  7. Add a policy requiring external product recommendations to be relevant, optional, transparently disclosed, and separable from the skill's core functionality.
  8. Add regression tests confirming that general Pinterest and ROI requests do not produce unsolicited vendor promotion.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding

The declared description presents this as a general-purpose Pinterest marketing skill for a wide range of strategy and optimization questions in ecommerce verticals. The supplied code instead performs a narrow, specific function: estimating Pinterest organic traffic revenue from user-provided metrics. While this is loosely related to Pinterest marketing, it does not deliver the broad advisory behavior described, nor does it address most of the listed use cases and triggers. Therefore the code's primary purpose is materially narrower and different from the declared skill description.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger text says to ALWAYS invoke the skill for a wide set of requests, including broad phrases like 'how do I promote my store visually' and 'my Pins get no clicks.' Overly broad invocation can route unrelated or only loosely related user requests into a domain-specific skill, causing inappropriate handling, degraded safety controls, or misleading advice in contexts where Pinterest-specific assumptions do not apply.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The invocation criteria extend to generic 'visual promotion' for lifestyle products and encourage force-fitting Pinterest advice unless ruled out. This can cause unintended activation on ambiguous e-commerce or marketing queries, increasing the risk of irrelevant recommendations, user confusion, and poor decision-making based on a channel-specific playbook that may not fit the user's situation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.