ClawHub
Back to skill

Security audit

Xiachufang

Security checks for vulnerabilities and agentic risk

Overview

This is a simple cooking and recipe-planning guidance skill with no scripts, credentials, persistence, or hidden data access.

Installers should treat this as ordinary cooking guidance. It may reference publicly visible community signals on Xiachufang, but it does not automate access or scraping; users with special dietary, pregnancy, infant, or medical needs should rely on professional guidance for safety-critical decisions.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.