ClawHub
Back to skill

Security audit

DNS配置工具专业版

Security checks for vulnerabilities and agentic risk

Overview

This is a DNS operations guide with expected command and credential notes, but users should be careful because DNS changes can affect live services.

Install only if you want an agent to help with DNS, Cloudflare, CAA, wildcard certificate, or migration tasks. Treat any DNS or certificate-changing step as production-impacting: export records first, verify the target zone, use least-privilege provider tokens through environment variables, and require explicit confirmation before changes.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Intent-Code Divergence

Medium
Confidence
94% confidence
Finding
The documentation states the skill does not call external APIs, yet it later instructs use of the Cloudflare DNS API with an API token. This inconsistency can mislead operators about the trust boundary, secret-handling requirements, and network exposure of the skill, increasing the chance that API credentials are provided under false assumptions.

Intent-Code Divergence

Medium
Confidence
90% confidence
Finding
The trigger conditions expand a DNS configuration skill into broad security detection, compliance auditing, quality inspection, and encryption-protection scenarios that are outside its stated capability. Overbroad activation criteria can cause the agent to invoke this skill in inappropriate contexts, leading to unsafe or irrelevant actions on production DNS or misleading security guidance.

Vague Triggers

Medium
Confidence
92% confidence
Finding
Ambiguous trigger conditions increase the chance of unintended invocation, especially in agent ecosystems where skill routing may rely on loose keyword matching. In a skill with write and exec capabilities tied to DNS operations, accidental selection can have real operational consequences, including disruptive or unauthorized record changes.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill describes create/modify/import/export/save operations for DNS and migration workflows without a prominent warning about production impact, rollback risk, or need for confirmation. Because DNS changes can disrupt websites, email, certificates, and recovery paths, under-warning users in a write-capable skill meaningfully increases the likelihood of harmful mistakes.

Static analysis

No suspicious patterns detected.