ClawHub
Back to skill

Security audit

JSON校验工具专业版

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a JSON validation tool, but it asks agents to activate for unrelated project-management work and includes under-scoped external notification/API behavior.

Review before installing. Use this only for JSON validation workflows, restrict scans to intended directories, keep auto-repair disabled unless backups are verified, and configure webhook/email/DingTalk callbacks only when you are comfortable sending validation results or file-derived metadata to those services.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
84% confidence
Finding
The skill advertises generic external API integration and broad data-handling capabilities that exceed what is necessary for a JSON linting tool. In an agent context with exec/read/write privileges, overstated integration scope can normalize sending file contents or validation outputs to third-party services, increasing the risk of unintended data disclosure or capability creep.

Vague Triggers

High
Confidence
90% confidence
Finding
The trigger conditions are vague and unrelated to the stated purpose, instructing use for project management, planning, and team collaboration rather than JSON validation. In an agent environment, overly broad triggers can cause the skill to activate in inappropriate contexts, leading to unnecessary file access, command execution, or handling of unrelated sensitive workspace data.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill documents webhook, email, DingTalk, and callback URL features without a prominent warning that validation results or file-derived metadata may be sent to external systems. This is dangerous because users may assume the tool is local-only and unknowingly permit outbound transmission of sensitive filenames, error details, configuration content, or operational metrics.

Static analysis

No suspicious patterns detected.