ClawHub
Back to skill

Security audit

Hupu

Security checks for vulnerabilities and agentic risk

Overview

This is a simple Hupu community guidance skill with no executable code, persistence, credential access, or hidden behavior.

Installing this skill should only add guidance for discussing and evaluating Hupu community content. Users should still treat community posts and ratings as opinionated public-source signals, not verified facts.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.