ClawHub
Back to skill

Security audit

Hydrate

Security checks for vulnerabilities and agentic risk

Overview

This is a static hydration reference with no hidden system access, but its medical-style guidance should be treated as educational rather than clinical advice.

Install only if you want a static hydration reference. Do not rely on it as personalized medical advice, especially for children, pregnancy, kidney or heart disease, severe dehydration, heat illness, persistent vomiting or diarrhea, confusion, fainting, or suspected electrolyte problems; seek professional care in those cases.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This skill provides health-related guidance on hydration, dehydration signs, electrolyte supplementation, exercise fluid planning, and rehydration protocols without a clear warning that the content is informational only and not a substitute for professional medical advice. Users may rely on the skill for self-treatment or delay seeking care for dehydration, electrolyte imbalance, heat illness, or other medical conditions, increasing the risk of harm.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This script provides extensive hydration, electrolyte, exercise, illness, and rehydration guidance in a way that could be acted on as medical advice, but it does not prominently warn users that it is informational only and not a substitute for professional care. The risk is elevated because it includes dosing-like recommendations and emergency-related health content, so users may self-manage dehydration, vomiting, diarrhea, heat illness, or electrolyte issues instead of seeking appropriate medical evaluation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.