ClawHub
Back to skill

Security audit

北京花粉监测

Security checks for vulnerabilities and agentic risk

Overview

This is a focused Beijing pollen lookup skill that queries public pollen APIs and does not request credentials, persistence, or privileged access.

Install this if you are comfortable with the skill making outbound requests to the documented Beijing pollen API when you ask about Beijing pollen conditions. Review implicit invocation settings if you only want the tool called after explicit confirmation.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.