ClawHub
Back to skill

Security audit

Video Optimization Specialist

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only video marketing advisor with no install steps, code execution, credential requests, or hidden account access.

Safe to install as a text-based consultant. Do not provide YouTube credentials, OAuth tokens, API keys, or full account exports unless you independently trust the publisher; share only the analytics or channel details needed for the advice.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The activation guidance says to reference the agent by name or specialty, but does not define specific trigger phrases or boundaries for when invocation should or should not occur. Because 'video optimization specialist' and similar specialty references could appear in ordinary discussion, this creates an ambiguous trigger surface for unintended activation.

Static analysis

No suspicious patterns detected.