ClawHub
Back to skill

Security audit

offer-tracker

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local job-application tracker that clearly discloses its HTML and JSON file updates and does not show hidden network, credential, or destructive behavior.

Install only if you are comfortable with the agent maintaining job-application data in a Desktop HTML file and overwriting the disclosed JSON backup with the latest full record set. Avoid entering passwords, verification codes, or unrelated personal information, which the skill itself also warns against storing.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill instructs the agent to create and repeatedly overwrite files on the user's Desktop, including a full JSON backup overwrite on every update, but does not require an explicit user confirmation or warning before modifying those files. That creates a real integrity and privacy risk: the agent may alter or replace user data in a visible filesystem location without the user clearly understanding that persistent local files will be created and rewritten.

Static analysis

No suspicious patterns detected.