ClawHub
Back to skill

Security audit

CN Holiday Calendar

Security checks for vulnerabilities and agentic risk

Overview

This China holiday calendar skill is mostly coherent, but it needs review because one helper can fetch arbitrary web addresses instead of being limited to official gov.cn notices.

Install only if you are comfortable with a calendar skill that can make outbound web requests from the agent environment. Prefer running it in a network-restricted environment or using a revised version that allowlists HTTPS gov.cn notice hosts, blocks redirects to internal/private addresses, and keeps cache writes limited to the documented cache directory.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
The body subcommand accepts an arbitrary URL and fetches it directly, which exceeds the stated purpose of consulting official gov.cn holiday notices. This creates an SSRF-capable primitive that can be abused to access internal services, cloud metadata endpoints, or other unintended network targets from the host running the skill.

Static analysis

No suspicious patterns detected.