ClawHub
Back to skill

Security audit

wpf-desktop

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed WPF desktop app guidance pack with release and testing advice, not an executable or hidden automation package.

Install this only if you are comfortable reviewing Chinese documentation or can translate it accurately. Before using the release workflow, verify current action versions and review GitHub release permissions, OIDC attestation permissions, and the WINGET_TOKEN scope for your repository.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (12)

Ae1

High
Category
analysis-evasion
Content
st call). Untimed fixes fix the wrong thing. Method: the phase-timing probe in `dev-switches.md`.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Ae1

High
Category
analysis-evasion
Content
st call). Untimed fixes fix the wrong thing. Method: the phase-timing probe in `dev-switches.md`.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Ae1

High
Category
analysis-evasion
Content
st call). Untimed fixes fix the wrong thing. Method: the phase-timing probe in `dev-switches.md`.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Ae1

High
Category
analysis-evasion
Content
st call). Untimed fixes fix the wrong thing. Method: the phase-timing probe in `dev-switches.md`.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Ae1

High
Category
analysis-evasion
Content
st call). Untimed fixes fix the wrong thing. Method: the phase-timing probe in `dev-switches.md`.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Hidden Instructions

High
Category
Prompt Injection
Content
<TargetFramework>net10.0-windows</TargetFramework>
    <UseWPF>true</UseWPF>
    <Nullable>enable</Nullable>
    <!-- 产物叫 Xxx.exe 而不是 Xxx.App.exe：默认取工程名，不设这行发版脚本里的文件名全对不上 -->
    <AssemblyName>Xxx</AssemblyName>
    <ApplicationManifest>app.manifest</ApplicationManifest>
    <!-- 从 git tag 取版本，见 pitfalls.md「版本号发出去还是上一版」；
Confidence
70% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High
Category
Prompt Injection
Content
<TargetFramework>net10.0-windows</TargetFramework>
    <UseWPF>true</UseWPF>
    <Nullable>enable</Nullable>
    <!-- 产物叫 Xxx.exe 而不是 Xxx.App.exe:默认取工程名,不设这行发版脚本里的文件名全对不上 -->
    <AssemblyName>Xxx</AssemblyName>
    <ApplicationManifest>app.manifest</ApplicationManifest>
    <!-- 从 git tag 取版本,见 pitfalls.md「版本号发出去还是上一版」;
Confidence
70% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
The skill explicitly states that the substantive guidance lives in Chinese reference files, while the index page is in English. This creates an accessibility and transparency gap: users or downstream agents that cannot read Chinese may act on incomplete understanding, making it harder to review safety-relevant instructions, code snippets, or behavioral caveats before use.

Natural-Language Policy Violations

Medium
Confidence
96% confidence
Finding
The entire skill is written as prescriptive Chinese-language guidance, including user-facing release text examples, without offering a language choice or stating that the skill is intended only for a Chinese-speaking or region-specific audience. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation.

Context-Inappropriate Capability

Medium
Confidence
87% confidence
Finding
The manifest describes a skill for building, debugging, or releasing a WPF desktop app on .NET, mentioning tray apps, single-file executables, DPI, startup, and release CI. While release CI itself is in scope, this step downloads an external tool and uses a token to submit updates to winget-pkgs, which is a distinct external distribution workflow not clearly justified by the stated purpose.

Natural-Language Policy Violations

Medium
Confidence
93% confidence
Finding
This markdown file is natural-language documentation, and its content is fully in Chinese from the title onward. The policy requires flagging language or locale constraints when a skill forces a specific language without user opt-in; here there is no indication of alternative language support or that the file is intentionally limited to a Chinese-only regional audience.

Natural-Language Policy Violations

Medium
Confidence
90% confidence
Finding
The file title and the entire skill guidance are written exclusively in Chinese, with no indication that language selection is optional or user-configurable. Under the policy for natural-language violations, forcing a specific language or locale without opt-in should be flagged unless clearly justified as region-specific, which is not stated here.

Static analysis

No suspicious patterns detected.