ClawHub
Back to skill

Security audit

GDPR Audit - GDPR合规审计工具

Security checks for vulnerabilities and agentic risk

Overview

This GDPR audit skill is coherent and disclosed, with scored runs sending limited audit answers to compliancehub.cn.

Use preview mode first if you do not want answers sent. Only run a scored audit if your organization permits sending GDPR audit status, an API key or anonymous trial id, and related scoring metadata to compliancehub.cn; review that provider's privacy terms and remove local drafts or key files when no longer needed.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Ssd 3

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This skill transmits compliance audit answers to a third-party cloud service for scoring, and those answers can reveal sensitive organizational security, privacy, and governance posture. Even if disclosed, sending such data off-host expands the attack surface and may violate internal policies or data-handling constraints if users provide detailed or identifying responses.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.