ClawHub
Back to skill

Security audit

Handoff Installer

Security checks across malware telemetry and agentic risk

Overview

This skill installs a disclosed repository handoff workflow that persists in the target git repo, with explicit confirmation and conflict checks before writing.

Install this only in repositories where you want future agents to follow this handoff protocol and where users can understand or accept the Chinese runtime rules. Review the files it will add to AGENTS.md, CLAUDE.md, .agents/, and tools/ before confirming write mode.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The activation text is broad enough to trigger on ordinary repository work such as starting or ending a session, which can cause this runtime protocol to intercept workflows beyond explicit handoff operations. Because the skill writes and governs persistent repository state, over-activation can steer future agent behavior, create unintended commits or task-state changes, and increase the chance of unsafe protocol takeover in normal development flows.

Natural-Language Policy Violations

Medium
Confidence
80% confidence
Finding
The skill body is written entirely in Chinese and does not provide a language-choice mechanism or document a strict locale requirement, which can cause misinterpretation of mandatory workflow rules by agents or users operating in other languages. In a protocol that controls repository state, commits, and handoff behavior, misunderstanding instructions can lead to incorrect task ownership, malformed baton updates, or incomplete archival steps.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.