Security audit

只需要说的简单技能

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a Chinese-language no-code OpenClaw skill generator with no bundled executable code or hidden system access.

Installers should expect Chinese-only documentation and should manually review any generated skill package, especially optional logic.js code and any ClawHub publishing step, before running or publishing it.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Ae1

High

Category: analysis-evasion
Content: - `SKILL.md`\uc0\u65306 \u25216 \u33021 \u23450 \u20041 \u25991 \u20214 \u65292 \u21253 \u21547 \u21151 \u33021 \u35828 \u26126 \u12289 \u20351 \u29992 \u26041
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The visible natural-language content in the README is entirely in Chinese, including the product introduction, features, and quick-start sections, with no indication that users may choose another language. Under the policy rule for language or locale violations, this is a concern unless the locale restriction is explicitly optional or justified as region-specific.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: This markdown file contains user-facing natural-language instructions and descriptions exclusively in Chinese, including the title, workflow, examples, and usage guidance. Because the skill does not offer an alternate language or indicate that the user can choose their preferred language, it effectively forces a specific language without user opt-in.

Static analysis

No suspicious patterns detected.