ClawHub
Back to skill

Security audit

debugging-and-error-

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a vague debugging and automation guide, but it asks for read and command-execution authority with broad, under-scoped activation and credential/command guidance.

Review before installing. Use it only for explicit debugging or error-recovery tasks, and do not let it run shell commands, use API keys, or access files unless you have confirmed the exact command, scope, and credentials involved.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill advertises very broad activation criteria such as efficiency improvement, automation, batch processing, and workflow optimization, which are generic enough to trigger in many unrelated contexts. Over-broad routing increases the chance that an agent invokes a skill with read/exec capabilities in situations the user did not specifically intend, expanding exposure to unsafe command execution or unintended automation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The documentation instructs users to configure API keys, prepare files, execute commands, and inspect outputs, while the skill declares exec/read tools, but it does not present prominent warnings or guardrails for system-impacting actions. In an agent setting, this can normalize command execution and credential use without emphasizing consent, sandboxing, scope limits, or review of destructive operations, increasing the risk of filesystem, network, or secret-handling abuse.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
96% confidence
Finding

The description explicitly says '支持中文交互，无需复杂配置即开即用', which presents Chinese interaction as the default behavior without indicating that users may choose another language. This is a natural-language locale constraint and the file does not document an opt-in or justified region-specific limitation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.