ClawHub
Back to skill

Security audit

Skill Plant Care

Security checks for vulnerabilities and agentic risk

Overview

This is a plant-care reference skill with no executable code or hidden access, but users should be cautious with its chemical treatment advice.

Before installing, be comfortable with a plant-care assistant handling plant photos and care details. For any pesticide, fungicide, or destructive plant-removal advice, follow product labels, local rules, PPE, ventilation, storage, and child/pet safety guidance, and consult a qualified gardening or agricultural source for severe infestations or edible plants.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger descriptions are very broad (e.g., plant photos, plant name inquiries, care questions, diagnosis requests), which can cause the skill to activate for many ordinary plant-related conversations without clear user intent to invoke this specific skill. In an agent ecosystem, over-broad activation can route users into unintended behavior paths, reduce predictability, and create opportunities for prompt/context hijacking through accidental invocation.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The guide recommends specific pesticides and fungicides such as imidacloprid, abamectin, malathion, carbendazim, and chlorothalonil without any safety context, PPE guidance, ventilation requirements, dosage warnings, storage/disposal instructions, or direction to follow the product label. In a consumer-facing plant care manual, this omission can lead users to misuse toxic chemicals, increasing risk of poisoning, skin/eye injury, harm to pets/children, and unsafe indoor application.

Static analysis

No suspicious patterns detected.