ClawHub
Back to skill

Security audit

xinjianxue-western-astrology

Security checks for vulnerabilities and agentic risk

Overview

This astrology skill sends birth details to its documented service and clearly discloses its ¥6 Alipay charge.

Use this only if you are comfortable sharing your exact birth date, time, and birthplace with api.xinjianxue.com; retention and deletion terms are not supplied. Expect ¥6 per completed chart, and check the recipient and amount before authorizing Alipay payment.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

The workflow sends precise birth details to a service without a privacy warning.

Medium
Category
Output Handling
Confidence
94% confidence
Finding

The workflow instructs the agent to collect an exact birth date, birth time, and birthplace and send them to a service without first disclosing that transfer or obtaining informed permission. These details can support identification or profiling when combined with other information, and users may not expect information supplied in conversation to reach another provider. Birth information is legitimately needed for this astrology service, which reduces suspicion of malicious intent, but the supplied file does not establish the recipient's identity, retention practices, or privacy safeguards.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 3)May include surrounding context.

md
# 接口契约

- 地址：`https://api.xinjianxue.com/api/xinjianxue/aipay/astro-natal`
- 方法：POST，`Content-Type: application/json`
- 单价：6 元/次
- 鉴权：只认 `Payment-Proof`，不需要账号、密码或登录态

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/payment.md (reported line 8)May include surrounding context.

1. 发起请求

bash
curl -sS -D - -X POST "https://api.xinjianxue.com/api/xinjianxue/aipay/astro-natal" \
  -H "Content-Type: application/json" \
  -d '{"year":1995,"month":8,"day":4,"h":5,"m":52,"birth_place":"浙江杭州","country":"CN"}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/payment.md (reported line 8)May include surrounding context.

1. 发起请求

bash
curl -sS -D - -X POST "https://api.xinjianxue.com/api/xinjianxue/aipay/astro-natal" \
  -H "Content-Type: application/json" \
  -d '{"year":1995,"month":8,"day":4,"h":5,"m":52,"birth_place":"浙江杭州","country":"CN"}'

The request workflow sends birth details to an external service without a user-facing privacy warning.

Medium
Category
Output Handling
Confidence
95% confidence
Finding

The workflow instructs the agent to send an exact birth date, birth time, and birthplace to an external API without first requiring disclosure or consent for that transfer. These details are relevant to astrology, which makes the processing purpose plausible, but their combination can identify a person and users may not expect an external service to receive them.

Content

No source excerpt is available for this finding.

The skill adds a mandatory payment workflow not disclosed in its astrology manifest.

Medium
Category
Excessive Agency
Confidence
92% confidence
Finding

The manifest describes generating and interpreting natal charts, but L43 instructs the agent to initiate buyer-side Alipay payment, and L47–L53 require submitting payment proof. L59–L60 make payment a prerequisite for any interpretation and prohibit fallback output, introducing an undisclosed commercial transaction requirement rather than merely implementing chart calculation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.