ClawHub
Back to skill

Security audit

自动整理专业版

Security checks for vulnerabilities and agentic risk

Overview

The skill is file-organization focused, but it gives broad automated authority over user files, background scheduling, and network notification/sync features without enough scoping or consent detail.

Review this carefully before installing. Use it only for explicit file-organization tasks, start with narrow test folders, require dry-run plans before deduplication or moves, avoid enabling watch/schedule/daemon modes until you understand rollback behavior, and configure email/callback/team sync only if you are comfortable with the resulting metadata leaving your machine.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
The documentation states that all file operations are local and that no file data is uploaded, yet elsewhere the skill supports callback URLs, email notifications, and remote/team sync. Those features create outbound communication paths that can transmit metadata or content-derived information, so the privacy guarantee is misleading and may cause users to expose sensitive data under false assumptions.

Vague Triggers

High
Confidence
84% confidence
Finding
The activation guidance is extremely broad, covering generic productivity and automation scenarios rather than narrowly scoped file-organization tasks. Overbroad routing increases the chance that an agent invokes a skill with read/write/exec privileges in contexts the user did not intend, expanding the blast radius for accidental file operations or misuse.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill advertises deduplication, scheduled actions, and real-time auto-organization across user directories, but does not prominently require scope review, dry-run output, backups, or explicit confirmation before destructive or autonomous changes. In a skill with read/write/exec tools, this can lead to unintended deletion, movement, or reorganization of important files at scale.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The examples describe scheduled and automatic organize/dedup actions over real user directories such as Downloads, Desktop, and Documents, including daemonized watching and recurring cleanup, without any warning about file moves, deletions, or duplicate-handling side effects. In a file-organizer skill, this context makes the omission meaningful because users may adopt the configuration directly and unintentionally lose access to files, overwrite organization choices, or remove data they expected to keep.

Static analysis

No suspicious patterns detected.