ClawHub
Back to skill

Security audit

reflow_machine_maintenance_guidance

Security checks for vulnerabilities and agentic risk

Overview

This is a read-only manufacturing guidance skill for reflow machine maintenance analysis and does not request credentials, persistence, installs, network access, or destructive actions.

Install only if you want an agent to help analyze reflow-machine maintenance questions using handbook, thermocouple, MES, or defect data. Point DATA_DIR only at files you intend the agent to process, and have any maintenance thresholds or operational recommendations reviewed by a qualified process or maintenance engineer before acting on them.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill description is broad enough to activate on a wide range of manufacturing, maintenance, data-analysis, and handbook-related requests without clear boundaries. Over-broad routing can cause the agent to invoke this skill in unintended contexts, increasing the chance of inappropriate data access, overconfident technical guidance, or unsafe maintenance recommendations based on partial or irrelevant inputs.

Static analysis

No suspicious patterns detected.