ClawHub
Back to skill

Security audit

Number Check,Judge Text Content Only Contain Number And Special Char

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small local text-checking helper with some documentation and language-quality issues but no hidden or high-risk behavior found.

Before installing, understand that the skill is documented in Chinese and echoes the full argument list before printing non-numeric segments. It appears safe for local text validation, but its output format may be confusing and should not be used with sensitive input unless that echo is acceptable.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
The manifest description and all user-facing instructions are written only in Chinese, indicating the skill is intended to operate in a fixed language/locale. The file does not mention any user opt-in, language selection, or region-specific justification, which matches the language/locale policy violation criteria.

Intent-Code Divergence

Low
Confidence
77% confidence
Finding
The skill description says it checks whether a string is composed of digits and a specified special character, but line L14 says 'if all are numbers return empty' and otherwise 'return all numbers.' That documented behavior contradicts the stated purpose because it omits handling of the allowed special character and describes an output pattern inconsistent with a boolean-style validation check.

Natural-Language Policy Violations

Low
Confidence
96% confidence
Finding
The file contains a Chinese comment and a user-facing print string, which imposes a specific language in the skill's interface. There is no indication that the skill is region-specific or that users can choose their preferred language, so this is a natural-language locale policy concern.

Static analysis

No suspicious patterns detected.