ClawHub
Back to skill

Security audit

竞品周报生成

Security checks for vulnerabilities and agentic risk

Overview

This is a prompt-only competitor-reporting skill that analyzes user-provided social-media exports and does not include code execution, persistence, or hidden data access.

Before installing, confirm that the Socialinsider exports and any YouTube data collected by Agent-Reach are obtained under your organization's authorization, platform terms, and privacy requirements. Expect Chinese report output and a Claude model configuration as documented.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (11)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The README explicitly says YouTube competitor data is obtained by running a crawler script, but provides no warning about platform Terms of Service, rate limits, consent, or privacy/compliance boundaries. In a skill meant for operational use, this can normalize unreviewed scraping practices and lead users to collect data in ways that violate platform rules or internal compliance requirements.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The manifest trigger phrases include "竞对分析" and "竞品数据", which are broad descriptions of general competitor analysis or competitor data rather than narrow invocation cues for this specific weekly social-media weekly report workflow. Because the file does not provide exclusion conditions or scope constraints alongside these triggers, they could cause unintended activation for adjacent analysis tasks.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The instruction "中文输出（运营团队阅读）" forces a specific language for all outputs. Under the policy, a fixed language requirement is a natural-language policy concern unless the skill offers opt-in choice or clearly documents and justifies the locale constraint; here, no user choice is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file contains user-facing natural language content exclusively in Chinese, including headings, instructions, and recommendations. Under the policy, forcing a specific language without user opt-in can be a language/locale policy violation, and no opt-in or region-specific justification is provided in the file.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file contains user-facing natural-language instructions exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into another language. Under the policy, forcing a specific language without user choice is a natural-language policy violation.

Content

No source excerpt is available for this finding.

External Model or Provider Selection

Medium
Category
Excessive Agency
Confidence
90% confidence
Finding

Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.

Content

Scanner excerpt · SKILL.md (reported line 12)May include surrounding context.

md
给FridayParts的行动建议。
  不是念数据，而是从数据里读出结论 + 给可落地建议。
  Use when: 生成竞品周报 / 分析竞品社媒数据 / 竞对追踪报告。
model: claude-sonnet-4-6
temperature: 0.5
max_tokens: 2000
triggers:

External Model or Provider Selection

Medium
Category
Excessive Agency
Confidence
90% confidence
Finding

Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.

Content

Scanner excerpt · skill/SKILL.md (reported line 12)May include surrounding context.

md
给FridayParts的行动建议。
  不是念数据，而是从数据里读出结论 + 给可落地建议。
  Use when: 生成竞品周报 / 分析竞品社媒数据 / 竞对追踪报告。
model: claude-sonnet-4-6
temperature: 0.5
max_tokens: 2000
triggers:

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The trigger list includes generic phrases like "竞对分析" and "竞品数据", which are broad enough to match many ordinary marketing or analytics requests beyond this specific weekly-report skill. The file does not provide exclusion conditions or constraints to distinguish when this skill should activate versus other competitor-analysis workflows.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The instruction "中文输出（运营团队阅读）" forces a specific output language, but the file does not offer user opt-in or choice of locale. Under the policy, fixed language requirements should be justified as region-specific or allow the user to choose.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

The natural-language instructions and usage guidance are written exclusively in Chinese, which can amount to a language-policy issue when no user opt-in or locale limitation is disclosed. The policy specifically calls for flagging forced language or locale constraints unless the skill offers a choice or documents a justified regional restriction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file contains end-user instructions exclusively in Chinese, and there is no note that the skill is region-specific or that users may choose another language. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.