ClawHub
Back to skill

Security audit

Weekly Reporter Pro

Security checks for vulnerabilities and agentic risk

Overview

This skill is a low-risk weekly report generator that prints fixed report text and does not access files, credentials, networks, or persistent state.

Install only if Chinese report output is acceptable for your workflow. The tool appears safe from a security perspective, but it uses fixed sample task data rather than integrating with your actual task tracker or files.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Confidence
96% confidence
Finding
This code file includes user-facing natural-language descriptions and CLI help text in Chinese, beginning with the module description. The skill does not offer an opt-in language choice or explain that it is intentionally limited to a Chinese-speaking context, which can violate language/locale policy requirements.

Natural-Language Policy Violations

Medium
Confidence
98% confidence
Finding
The command help text shown to users is presented in Chinese, and the generated report titles/content are also Chinese-only. Because the skill does not provide a language selection mechanism or documented locale justification, it imposes a specific language on users.

Static analysis

No suspicious patterns detected.