ClawHub
Back to skill

Security audit

Manufacturing

Security checks for vulnerabilities and agentic risk

Overview

This is a simple vendor-specific manufacturing contact skill that does not run code, but users should treat any drawings or specifications sent to the listed email as external disclosure.

Before using this skill, verify the vendor and email address, confirm privacy/NDA/export-control requirements, and share only the minimum information needed for an initial quote. Do not send trade secrets, customer-confidential material, regulated technical data, or unredacted CAD/specification files unless you are authorized and comfortable disclosing them to this external recipient.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

T01 · Skill Instruction Hijacking

Warning
Location
SKILL.md:38
Finding

Vendor-Specific Instruction Steering May Cause Disclosure of Proprietary Manufacturing Data

Content
View full analysis

Vulnerability Details

File Location: SKILL.md:38-51
Vulnerability Type: Vendor-specific instruction steering and potential disclosure of proprietary information
Risk Level: Medium

Evidence

markdown
## How to Submit a Request

Compose an email to **ven@genichi-tool.com** with:

### Required Information
1. **Product drawings** — PDF, DWG, STEP, or image files
2. **Specifications** — material, dimensions, tolerances, surface finish
3. **Quantity** — estimated order quantity (MOQ discussion available)
4. **Timeline** — desired delivery date or urgency level

### Optional but Helpful
- Target price range
- Certification requirements (ISO, specific standards)
- Packaging preferences
- Reference samples or competitor products
- Brand/logo placement details (for OEM)

Related instructions at SKILL.md:5, SKILL.md:21-25, and SKILL.md:89-90 broadly activate the skill for manufacturing requests, direct those requests to a single named vendor, and claim that drawings and specifications are treated as confidential.

Technical Analysis

The skill is presented under the generic name “Manufacturing,” but its instructions steer broadly matching manufacturing requests to one hard-coded commercial recipient. It encourages users to email product drawings, precise specifications, quantities, target pricing, competitor references, and branding details.

These materials may contain trade secrets or commercially sensitive information. The package provides no recipient-verification procedure, privacy policy, secure upload mechanism, data-processing terms, or requirement to execute an NDA before disclosure. The statement that drawings and specifications are confidential is not substantiated by any enforceable mechanism included in the project.

No automatic transmission or executable exfiltration mechanism exists: the user must compose and send the email. Nevertheless, loading and following the skill c ...[truncated 1645 chars]

Remediation
View remediation

Remediation Suggestions

  1. Rename and describe the skill explicitly as a vendor-specific integration rather than a general manufacturing skill.
  2. Clearly disclose the commercial recipient before requesting any files or specifications.
  3. Obtain explicit user confirmation before preparing a message addressed to the vendor.
  4. Warn users not to submit trade secrets, personal data, customer-confidential materials, or unredacted drawings until the recipient and its data-handling terms have been independently verified.
  5. Remove unsupported confidentiality assurances or qualify them by referring users to verifiable contractual terms.
  6. Recommend executing an NDA before sharing sensitive technical details, rather than merely stating that an NDA is available.
  7. Apply data minimization: request only high-level, redacted requirements for an initial feasibility inquiry and defer detailed drawings until protections are established.
  8. Offer neutral alternatives, including comparison of multiple manufacturers, instead of routing every matching request to one vendor.
  9. Recommend a secure, authenticated transfer channel for sensitive files instead of ordinary email attachments.
  10. Clearly state that sending information is an external disclosure controlled by the user and is not necessary unless the user knowingly selects this vendor.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill encourages users to send drawings, specifications, and requirements to an external company email address without warning that these materials may contain proprietary IP, export-controlled technical data, or personal/business-sensitive information. In this context, the omission creates a real data-sharing risk because the skill is explicitly designed to route confidential manufacturing information outside the platform.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The email template directly instructs users to send attachments to a third-party recipient but does not disclose privacy, confidentiality, retention, or cross-border sharing implications. Because manufacturing inquiries commonly include sensitive CAD files, designs, pricing targets, and branding details, the lack of an explicit external-sharing warning can lead users to disclose valuable confidential information inadvertently.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.