Security audit

简历面试题生成器

Security checks for vulnerabilities and agentic risk

Overview

The skill content is coherent and privacy-aware, but its documentation includes an unpinned npx installer that can execute mutable third-party code during installation.

Use the OpenClaw install path where possible. If using the Skills Hub npx command, pin and verify the CLI version first, and do not run it from an elevated shell. Be mindful that real resumes can contain sensitive personal data even though the skill instructs the agent not to repeat contact details.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: README.md:20
Finding: Unpinned Third-Party CLI Is Downloaded and Executed During Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (11)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The natural-language content for the skill description, use cases, and verify prompt is written in Chinese, but the file does not state that the skill is China-specific or give users an option to choose another language. This can violate language/locale policy expectations because it effectively forces a specific language without user opt-in.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 94% confidence
Finding: The marketplace file instructs users to run npx @skills-hub-ai/cli install resume-interview-generator-2 without pinning an exact package version. That creates a supply-chain risk: users may execute whatever version is current at install time, including a compromised or maliciously updated release. Because this is an installation command in user-facing documentation, the skill context makes the issue more dangerous than a passive reference.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 92% confidence
Finding: The README instructs users to run npx @skills-hub-ai/cli install resume-interview-generator-2 without pinning an exact package version. This creates a supply-chain risk because a future compromised or maliciously updated package version could be fetched and executed implicitly on the user's system. The skill context increases concern because installation instructions are likely to be copied verbatim by users, making exploitation practical.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file explicitly states "Default language: 中文", which imposes a language default in natural-language documentation. Under the policy, locale or language constraints should either offer user opt-in/choice or be clearly justified as region-specific; neither is present here.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 94% confidence
Finding: The README instructs users to run an unpinned npx @skills-hub-ai/cli install ... command, which fetches and executes the latest published package at install time. If the upstream package is compromised, typo-squatted, or a malicious version is published, users could execute attacker-controlled code on their local machine during installation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The instruction at L3 is written as a direct requirement in Chinese and does not offer any language or locale choice to the user. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is clearly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The title, summary, keywords, and user_needs are all written only in Chinese, which indicates a language-specific experience but provides no indication that the skill is China-region-specific or that users can choose another language. This creates a natural-language policy concern because the skill appears to enforce a specific locale without opt-in or justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The README explicitly states 'Default language: 中文', which imposes a locale/language default in natural-language documentation. Under the policy, forcing a specific language without offering a user choice or opt-in can be a language/locale policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The file specifies an output language choice but sets the default to Chinese, which imposes a locale preference unless the user notices and overrides it. Under the policy, language constraints should be opt-in or clearly justified; this default behavior is not justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown guidance forces a specific language for users/readers with no opt-in, alternative locale, or justification that the skill is region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The file title and introductory description are written entirely in Chinese, and the rest of the skill content continues in that language with no indication that users may choose another language. Under the policy rule for language/locale, this is a natural-language constraint that lacks user opt-in or justification as a region-specific tool.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.