ClawHub
Back to skill

Security audit

插件架构工具-免费版

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a local UI plugin architecture helper, but its installation and activation instructions are too under-specified for the exec/write authority it requests.

Review this before installing. It may be legitimate for a developer tool to modify a local project, but only proceed if you can see the exact installation steps and approve any commands or file changes in the target application.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
83% confidence
Finding
The skill allows activation via vague natural-language instructions without clearly bounded intents or parameter validation. In an agentic environment with read/exec/write tools, ambiguous triggering can cause the agent to perform unintended actions or over-broaden the requested task, especially during installation or configuration workflows.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger conditions section is incomplete and unclear, leaving the circumstances for activation undefined. This increases the chance that an agent may invoke the skill in the wrong context or interpret unrelated user input as authorization to install, configure, or modify a local environment.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The installation instructions explicitly tell the agent to read another file and execute installation steps, but do not warn the user that commands may be run on their machine. In a skill with exec/write/read capabilities, this creates a meaningful risk of unreviewed command execution, privilege misuse, or unwanted system changes if the referenced installation file is unsafe or has been tampered with.

Static analysis

No suspicious patterns detected.