ClawHub
Back to skill

Security audit

日志

Security checks for vulnerabilities and agentic risk

Overview

The skill is mainly a log-sanitizing helper, but it requests read, write, and command execution access while giving broad and loosely bounded operational instructions.

Review this carefully before installing. Use it only on logs or files you intentionally provide, avoid granting command execution unless your agent can restrict commands and paths, and require confirmation before writing sanitized output or setting up any monitoring workflow.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
76% confidence
Finding
The skill is described for very broad operational contexts including monitoring, alerting, and deployment management, despite exposing `read`, `write`, and `exec` tools. Overly broad trigger scope can cause the agent to invoke this skill in unrelated workflows where sensitive data or command execution is present, increasing the chance of unintended execution, data exposure, or misuse.

Vague Triggers

Low
Confidence
72% confidence
Finding
The quick-start guidance tells the agent/user to invoke the skill with necessary parameters but does not define when it should or should not be used. In an agent ecosystem, that kind of generic invocation guidance can lead to accidental activation in contexts outside log sanitization, which is more concerning here because the skill declares execution and file-writing capabilities.

Static analysis

No suspicious patterns detected.