ClawHub
Back to skill

Security audit

xinjianxue-skill-inlaw-global

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed paid relationship-advice API integration that asks for consent and credentials for its stated service, with no executable code or hidden persistence found.

Before installing, be comfortable sharing birth details, gender, birthplace, current location, and a one-time authorization code with this service. Confirm each paid report request, agree where credentials will be stored, and avoid using it where third-party consent is unclear.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Anti-Refusal Statement

High
Category
Anti-Refusal
Content
**Delivery style**: Present all sides' mechanisms at once, take no side, and give an executable path for negotiating boundaries.

**What this advisor will not take on**:
- Do not judge who is the good person and who is the bad one
- Do not decide for the user whether to live apart or divorce

> That is this advisor's sense of direction.
Confidence
85% confidence
Finding
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
Call `POST /api/xinjianxue/ai/license/verify` (include credentials if you have them; body or headers are both accepted). **The only criterion is `pass`:**

- `pass: true` → **already onboarded**: use the APIs directly, and do not ask the user for any credential.
- No credentials / `pass: false` → act on the returned `msg`; **go to Step 1 only once you have confirmed "never onboarded"**. Do not blindly re-apply (re-applying produces an extra license that nobody uses).

### Step 1: Apply for the AI business license (once only)
Confidence
81% confidence
Finding
The skill instructs the AI to autonomously verify onboarding status and proceed to use stored credentials without fresh user confirmation. In a skill that handles sensitive personal data and paid API calls, this can lead to unauthorized external requests, privacy leakage, or token charges based on stale context or silently reused credentials.

Static analysis

No suspicious patterns detected.