ClawHub
Back to skill

Security audit

Zeelin US-Iran War Situation Tracker

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only news-tracking skill that tells the agent how to search and summarize recent public reporting about the US-Iran conflict.

Before installing, expect the skill to make the agent search recent public web sources, including Farsi and Hebrew terms, and to produce long conflict reports with attributed claims. Users should treat outputs as high-stakes open-source intelligence, check translations and source reliability, and avoid relying on it as confirmed operational fact.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly directs multilingual searching in Farsi and Hebrew without any user opt-in or preference check. This can cause the agent to access content outside the user's expected language scope, increasing the chance of collecting unexpected, sensitive, or hard-to-verify material and making the agent's behavior less transparent to the user.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.