ClawHub
Back to skill

Security audit

Newsletter Creation & Curation

Security checks for vulnerabilities and agentic risk

Overview

This is a newsletter strategy guide with no executable behavior, though users should revise one growth tactic to require explicit subscriber consent.

Installers should understand this skill as a marketing and newsletter-writing playbook, not an automation tool. Before following the subscriber-growth tactics, replace automatic enrollment with clear, optional opt-in consent, keep unsubscribe handling in place, and review applicable email marketing and privacy rules for the target jurisdiction.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

other

Warning
Location
SKILL.md:567
Finding

Automatic Newsletter Enrollment Without Explicit Consent

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 1)May include surrounding context.

md
# Newsletter Creation & Curation

A comprehensive skill for creating, structuring, and curating email newsletters for B2B SaaS companies.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The README says users can 'simply mention newsletter-related tasks' and that the system will 'automatically' use the skill, but it does not define clear activation boundaries or non-goals beyond a general limitations section. In an agent environment, overly broad trigger language can cause the skill to activate in loosely related contexts, increasing the chance of inappropriate influence on responses or unintended workflow selection.

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 1502)May include surrounding context.

text
ADVANTAGES:
✅ No approval needed (publish freely)
✅ Personal voice = authentic
✅ Company brand = personal brand
✅ Can share metrics ("We're at $5M ARR")

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 1527)May include surrounding context.

md
CHALLENGES:
⚠️ Company may want control over messaging
⚠️ Can't share company metrics without approval
⚠️ Must add "Views are my own" disclaimer
⚠️ Manager needs to be aware

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The guidance instructs users to use Indian companies, rupee pricing, and Indian regulations as the default for the India strategy, which is a locale constraint expressed in imperative language. Because the document elsewhere routes users by geography rather than offering flexible locale selection at the point of use, this can violate language/locale policy expectations when users have not explicitly opted in to localized conventions.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.