ClawHub
Back to skill

Security audit

UmowaGenerator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local Polish contract-template generator with disclosed personal-data fields and no evidence of hidden network access, persistence, credential use, or destructive behavior.

Before installing, treat generated contracts as templates rather than legal advice, and be careful entering PESEL/NIP or address data. The reviewed artifact does not implement a secure email/PDF workflow despite advertising PRO features, and several CLI paths appear broken, so validate output manually before relying on it.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill description explicitly requests highly sensitive personal data such as PESEL/NIP and advertises email delivery of generated contracts, but it provides no privacy notice, retention policy, consent flow, or handling safeguards. In a legal-document context, this increases the risk of unauthorized disclosure, insecure transmission, or over-collection of personally identifiable information, especially because contracts often contain full identity and address details.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
99% confidence
Finding

The zlecenie generation path passes arguments into generate_zlecenie_content, which references lieu_of_work even though that variable is neither a parameter of generate_zlecenie_content nor defined in its scope. This causes a runtime NameError when generating that contract type, making advertised functionality unavailable and creating a denial-of-service condition for that path.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The banner text says "Generator Umów Prawnych dla Polaków," which frames the skill as specifically for Poles rather than offering a language or locale choice. Under the policy rule, forcing a specific language/locale context without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
79% confidence
Finding

All user-facing instructions and examples are presented only in Polish, which can amount to a language/locale restriction. While the content appears Poland-focused, the file does not explicitly state that the skill is limited to Polish-language use or offer any language choice to users.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.