ClawHub
Back to skill

Security audit

掘金工具

Security checks for vulnerabilities and agentic risk

Overview

This Juejin tool is mostly disclosed, but its activation instructions are broad and contradictory enough that it could be invoked for unrelated database tasks while carrying command, file, login-cookie, and publishing capabilities.

Review before installing. Use this only for explicit Juejin tasks, and avoid enabling it for database, SQL, ETL, or general automation work unless the trigger text is corrected. If you use login-based publishing, treat $HOME/.juejin_cookie.json as a sensitive session file and remove it after use.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
The trigger condition states the skill should be used for database operations, SQL queries, and data storage management, which directly conflicts with the skill’s actual Juejin-only read/draft publishing scope. This can cause the agent to activate the skill in unrelated contexts, expanding its execution surface and potentially invoking exec/write behavior for tasks the skill was never designed to handle.

Vague Triggers

High
Confidence
90% confidence
Finding
The description includes broad activation guidance such as improving efficiency, automation, batch processing, and workflow optimization, which is far wider than the narrowly scoped Juejin content tool described elsewhere. Overbroad activation text can cause the agent to select this skill in unrelated tasks, unnecessarily granting access to exec/write capabilities and increasing the chance of unsafe side effects.

Vague Triggers

High
Confidence
96% confidence
Finding
The trigger conditions are both ambiguous and contradictory: they first describe a Juejin tool, then instruct activation for database and SQL tasks that are outside scope. This mismatch makes accidental invocation more likely and is especially risky because the skill declares exec/write tooling, enabling filesystem or command execution in contexts unrelated to Juejin.

Static analysis

No suspicious patterns detected.