ClawHub
Back to skill

Security audit

zayn-reply

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrowly scoped customer-reply drafting aid with no executable behavior, persistence, or hidden data access.

Installers should use this only for customer-response drafting and provide only the specific customer message, confirmed facts, and business boundaries needed for the reply. Set the desired output language and channel explicitly.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The default prompt instructs the system to use the skill for the current task without any scope restriction or explicit trigger conditions. This can cause over-broad activation, leading the skill to influence unrelated conversations and potentially override user intent or route sensitive content through the skill unnecessarily.

Natural-Language Policy Violations

Medium
Confidence
81% confidence
Finding
The skill metadata and prompt describe behavior in Chinese, which implies the skill may default to Chinese-language responses even when the user has not requested that language. This can create misleading or unusable output, especially in multilingual or customer-facing contexts, and may cause communication errors rather than a direct security compromise.

Static analysis

No suspicious patterns detected.