ClawHub
Back to skill

Security audit

数据库设计与运维

Security checks for vulnerabilities and agentic risk

Overview

This database operations skill has broad declared read/write/command abilities, but its artifacts are mainly safety guidance and show no hidden installation, persistence, exfiltration, or destructive automation.

Install this only for agents you trust to help with database operations. Treat any schema change, data update, backup restore, command execution, API call, or production database access as requiring explicit review and confirmation before running.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
78% confidence
Finding
The invocation scope is extremely broad and overlaps with ordinary database-related requests, making it likely an agent will auto-select this skill in contexts involving live databases, schema changes, backups, or queries. Because the skill also advertises powerful capabilities like read/write/exec and API use, ambiguous triggering can cause unintended operational or data-impacting actions without sufficiently explicit user intent.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill advertises automated exec, write, and API behaviors but does not present a prominent upfront warning that these actions can modify systems, contact external services, or affect live data. In a database operations context, that omission is dangerous because users may invoke the skill for advice and inadvertently authorize destructive or sensitive operations such as schema changes, backups, or command execution.

Static analysis

No suspicious patterns detected.