ClawHub
Back to skill

Security audit

knowledge-graph

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Knowledge Graph API helper that stores and queries user-directed graph data, with clear limits and safeguards around secrets and retries.

Install this only if you intend to use the AI Skills hosted Knowledge Graph service and are comfortable storing selected entities, relations, and source URLs there. Keep the API key in the environment variable only, avoid submitting secrets or private tokens as graph fields, and note that the docs are currently written in Chinese.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Natural-Language Policy Violations

Medium
Confidence
87% confidence
Finding
The manifest description and the main skill description are written entirely in Chinese and present the skill's usage context only in that language. This can violate language/locale policy expectations when no user language choice or opt-in is provided, especially for a generally applicable skill rather than a clearly region-specific one.

Natural-Language Policy Violations

Medium
Confidence
96% confidence
Finding
该文件全文以中文撰写，且未说明这是可选语言、可根据用户偏好切换，或因特定地区/合规要求而必须使用中文。按照规则，若技能在自然语言层面强制特定语言而未取得用户选择或提供合理约束说明，属于语言/区域策略违规。

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
IDEMPOTENCY_KEY="$(uuidgen | tr '[:upper:]' '[:lower:]')"

curl --fail-with-body --silent --show-error \
  -X POST "$API_ROOT/knowledge-graph/entity.upsert" \
  -H "Authorization: Bearer $KNOWLEDGE_GRAPH_API_KEY" \
  -H "Content-Type: application/json" \
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Natural-Language Policy Violations

Medium
Confidence
87% confidence
Finding
该文件的自然语言说明完全以中文呈现，未说明这是区域特定技能，也未提供可选语言或用户选择机制。按照规则，若技能在未明确限定区域或未征得用户同意的情况下强制单一语言，属于自然语言层面的策略风险。

Natural-Language Policy Violations

Low
Confidence
94% confidence
Finding
标题及全文均以中文编写，且未说明这是可选语言、区域特定要求，或提供用户选择其他语言的方式。根据规则，若技能强制特定语言而无用户 opt-in，属于自然语言层面的政策风险。

Static analysis

No suspicious patterns detected.