ClawHub
Back to skill

Security audit

小红书内容自动化工作流

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a content-writing workflow, but its advertised automatic Xiaohongshu publishing could affect a live social account without clear confirmation or safety boundaries.

Use this skill comfortably for drafting, titles, hashtags, and formatting. Before enabling any browser automation or publishing workflow, confirm exactly which account is logged in, review the final post, and require an explicit publish confirmation so the agent does not post publicly by accident.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill explicitly advertises '自动发布小红书' and later references browser automation for publishing, but it does not warn that this may trigger real external actions such as logging in, posting content, or interacting with a live account. In an agent setting, omission of an execution-risk warning can lead users to invoke account-affecting automation without understanding that the action is not merely content generation but can perform real-world side effects.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The description and keywords specify Chinese/Xiaohongshu-focused content creation ("小红书..." and "chinese"), which indicates a language/locale constraint in the skill metadata. The file does not mention any user opt-in or explicit justification that this is a region-specific skill, so this may violate the language/locale policy requirement.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

The skill is presented entirely as a Chinese-language workflow for Xiaohongshu content, with no indication that users may choose another language or that the Chinese-only constraint is an intentional, documented requirement. Under the policy, forcing a specific language or locale without opt-in can be a natural-language policy issue unless the restriction is clearly justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.