ClawHub
Back to skill

Security audit

vRain 古籍电子书制作

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent local wrapper for making Chinese ancient-book-style PDFs, with disclosed setup and file-generation risks but no evidence of hidden or malicious behavior.

Install only if you trust the vRain GitHub repository and the Perl modules it requires. Prefer non-sudo dependency installation where possible, use the documented test mode before large runs, confirm output paths, and back up existing generated PDFs before rerunning commands that may overwrite them.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger condition is broad enough that the skill could activate on loosely related requests such as general PDF formatting or ebook generation, causing the agent to invoke local tooling unexpectedly. In a skill that wraps command-line tooling and assumes a specific local repository/workdir, mis-triggering increases the chance of unintended command execution, erroneous file operations, or confusing outputs.

Vague Triggers

Medium
Confidence
88% confidence
Finding
The background-generation trigger is also underspecified, so it may be selected for ordinary image-generation or design requests that are not meant to use local Perl scripts. Because this feature directs execution in a specific local directory with custom configs, accidental activation can lead to unintended script runs and misuse of local resources.

Static analysis

No suspicious patterns detected.