ClawHub
Back to skill

Security audit

Word文档工具V102（免费版）

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Word document automation skill, with disclosed local file and command needs, but users should be explicit about target files and review any write or exec action.

Install only if you are comfortable with an agent reading and writing local Word documents and running documented setup or processing commands. Use explicit input and output paths, keep backups of important documents, and confirm before overwriting, deleting, exporting, or running shell commands.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The example trigger phrases are broad, ordinary-language requests such as applying formatting or enabling tracking, with no explicit activation boundaries, confirmation requirements, or exclusions. In an agent environment with read/exec/write tools, this can cause accidental invocation and unintended document changes when a user is merely discussing Word-related tasks rather than authorizing execution.

Vague Triggers

Medium
Confidence
90% confidence
Finding
The skill is described as being driven by natural-language instructions on any compatible agent platform, but it does not define when the skill should or should not activate. This ambiguity increases the risk of overbroad matching and unintended execution, especially because the skill advertises exec-backed functionality alongside document modification behavior.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The document advertises create/query/modify/delete operations and includes code that saves a DOCX file, but it does not warn users about overwrite risk, destructive edits, or where outputs will be written. In a tool-enabled agent, this omission can lead to silent file modification or data loss if the skill is invoked on the wrong document or path.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly states that some functions require exec capability, yet it provides no safety guidance on command execution, allowed command scope, environment assumptions, or potential host impact. Because exec can affect the local system beyond document processing, the lack of guardrails materially raises the risk of unsafe or overly privileged command execution.

Static analysis

No suspicious patterns detected.