ClawHub
Back to skill

Security audit

product-operations

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed product-operations assistant that uses a configured API key to call a specific external service and limits file handling to user-provided summary data.

Install this only if you intend to use the AI Skills hosted service or a trusted self-hosted AI_SKILLS_API_URL, and treat PRODUCT_OPERATIONS_API_KEY like a secret. For reviews, confirm that only summarized metrics from user-selected files are sent, not raw files or unrelated business data.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

Natural-Language Policy Violations

Medium
Confidence
93% confidence
Finding
The natural-language content in the manifest description and README sections consistently forces Chinese for usage instructions and interaction context. Under the policy, a skill should not impose a specific language or locale unless it offers user opt-in or clearly documents a justified regional restriction.

Natural-Language Policy Violations

Medium
Confidence
91% confidence
Finding
This markdown file presents all behavioral rules exclusively in Chinese and does not state that language selection is optional or user-configurable. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
This markdown file contains user-facing instructions only in Chinese, which can impose a specific language on users without opt-in. The policy explicitly calls for flagging language or locale constraints when no choice or justification is provided.

External Transmission

Medium
Category
Data Exfiltration
Content
请求使用 Bearer Token，并为每次逻辑操作生成一个不会重复使用的幂等键：

```sh
curl -sS -X POST "${AI_SKILLS_API_URL:-https://ai-skills.open-idea.net}/api/v1/product-operations/operation.plan" \
  -H "Authorization: Bearer ${PRODUCT_OPERATIONS_API_KEY}" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 生成的UUID" \
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
This markdown file presents all operational instructions and field requirements exclusively in Chinese. Under the policy for natural-language violations, forcing a specific language without offering the user a language or locale choice can be a policy issue.

Natural-Language Policy Violations

Low
Confidence
83% confidence
Finding
This file presents all user-facing instructions exclusively in Chinese, which can amount to a language/locale constraint without opt-in. The content does not state that the skill is region-specific or offer an alternative language, so it may violate the language-choice policy.

Static analysis

No suspicious patterns detected.