ClawHub
Back to skill

Security audit

wedding-toast-architect

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent offline wedding-toast writing and scanning helper with only user-directed local draft reading.

This appears safe to install for offline wedding-toast drafting. Be aware that using the scan command gives the local script access to the draft file path you provide, so only scan files you intend it to read.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
55% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · references/toast-craft.md (reported line 83)May include surrounding context.

md
3. Feet still, eyes up at sentence ENDS — that's where connection happens.
4. Mic discipline: mouth one hand-width from the mic; if no mic, speak to the
   back wall.
5. If a joke dies: don't explain, don't apologize — next sentence, moving on.
6. The final line is memorized cold. Cards can fail; the ending cannot.

## Repair guide per flag class

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

This Python code opens and reads a user-supplied file path, which is a file-access operation covered by the missing-warning rule for code files. While the CLI argument name suggests a path is expected, there is no confirmation prompt and no explicit warning in the file's user-facing help or module docstring that the tool will read local draft contents.

Content

No source excerpt is available for this finding.