ClawHub
Back to skill

Security audit

Daily Digest

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says: it fetches user-provided URLs, summarizes them into a digest, and only sends them elsewhere if the user asked for that channel.

Install is reasonable for summarizing public or approved URLs. Before using it with internal pages, confidential documents, or Slack/email delivery, confirm that the content and recipient channel are approved for sharing.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill instructs fetching arbitrary external URLs and may deliver the resulting digest to external channels, but it does not clearly warn users about the privacy, data handling, and exfiltration risks of doing so. In practice, users may include sensitive internal URLs or content, then unintentionally cause that data to be summarized and sent to third-party destinations such as email or Slack.

Static analysis

No suspicious patterns detected.