ClawHub
Back to skill

Security audit

Enterprise Ai Knowledge

Security checks for vulnerabilities and agentic risk

Overview

This is a read-only enterprise AI advice skill with broad but disclosed advisory scope and no code, persistence, credentials, or system access.

Install this if you want a general enterprise AI implementation and maturity-planning reference. Treat its cited frameworks and statistics as advisory content to verify against your own business context, but there is no artifact-backed indication of unsafe system access or hidden behavior.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The skill declares a very broad trigger scope covering essentially any enterprise-AI strategy, implementation, evaluation, or planning question. Overly broad activation can cause the agent to invoke this skill in contexts where it is only partially relevant, leading to misrouting, lower-quality guidance, and possible overshadowing of more specialized skills or safety controls.

Static analysis

No suspicious patterns detected.