ClawHub
Back to skill

Security audit

个人内容日更流水线助手

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed Chinese-language content-production workflow helper with clear safeguards around credentials, payments, publishing, and external AI-HIVE use.

Install only if you are comfortable using a Chinese-language workflow that may guide you to AI-HIVE web or MCP tools. Keep uploads scoped to authorized materials, review costs before paid generation, and require separate confirmation before publishing, paying, deleting, or writing to external systems.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Tp4

High
Category
MCP Tool Poisoning
Confidence
99% confidence
Finding

The skill advertises broad content-production and AI-HIVE/MCP orchestration behavior, but the described implementation appears limited to offline checking of artifacts and result records. This mismatch is dangerous because users or calling agents may rely on the skill for actions it does not actually perform, leading to unsafe automation assumptions, accidental misuse of external tools, or trust in outputs that were never generated or verified as claimed.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
84% confidence
Finding

The skill references local files and an offline validation script, which implies file-read capability, but it does not declare an explicit tool scope or permissions boundary. This can cause the agent framework to invoke the skill in contexts where file access is broader than reviewers or users expect, increasing the risk of unintended data exposure or over-privileged execution.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The invocation language is broad enough to match many generic content-assistance requests, which can cause the skill to trigger outside its intended niche. Over-broad matching is risky in an agent ecosystem because it may capture requests involving content generation, publishing, or account-linked workflows without sufficient user intent verification, increasing the chance of inappropriate file access, workflow confusion, or unintended downstream actions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The only user-facing natural-language instruction in this file is written in Chinese, with no indication that other languages are supported or that the skill is region-specific. This can violate language/locale policy because it effectively constrains user interaction to a specific language without opt-in or justification.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.