skill-finder-cn
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
clawhubbinary viascripts/search.shto search the registry and provides instructions for the agent to runclawhub inspectandclawhub installbased on user requests. - [PROMPT_INJECTION]: The skill facilitates indirect prompt injection by ingesting and displaying metadata from the external
clawhub.airegistry. Maliciously crafted skill descriptions in the registry could attempt to influence the agent's subsequent actions. - Ingestion points: Search results and skill details fetched from
https://clawhub.aivia theclawhubCLI. - Boundary markers: None identified; external content is presented to the agent without specific delimiters.
- Capability inventory: Capability to execute search, inspection, and installation commands through the shell.
- Sanitization: No evidence of output sanitization for the data retrieved from the remote registry.
Audit Metadata