Skills/ClawHub/dana-clinic-booking

dana-clinic-booking@1.0.0

CAUTION· static only

Publisher claims: "明洞丹雅皮肤科 — 首尔明洞人气皮肤科，提供皮肤管理、激光、注射等医美项目" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher beautsgo · publishing for 200 daysInstalls 467Last detonated 34 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-13 and scored it 66/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Hidden zero-width characters detected; Prompt injection. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

LOW
Prompt injectiondata/hospital.json:17 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"search_keywords": "明洞丹雅皮肤科, 明洞旦娥医院, DAN-A CLINIC, 丹雅"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectioni18n/zh.json:12 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"channel_android": "二、🤖 Android 手机预约（安卓用户）\n打开 Google Play 搜索「BeautsGO」或「彼此美」，下载安装 APP 📲。\n打开 APP，在搜索栏输入「明洞丹雅皮肤科」或「DAN-A CLINIC」即可找到{name}。\n查看详细信息：地址、营业时间、价格、优惠活动等。\n点击【立即预约】或【咨询一下】提交 ✅。",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionskill-card.md:17 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileExternal users use Dana to view DAN-A Clinic booking guidance, submit appointment requests through BeautsGO, open clinic or consultation pages, query prices, and get app download links.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectioni18n/zh.json:11 · Prompt injection — known jailbreak technique reference · informational: not an instruction file… App Store 搜索「BeautsGO」或「彼此美」，下载并安装 BeautsGO APP 📥。\n打开 APP，在顶部搜索栏输入「明洞丹雅皮肤科」或「DAN-A CLINIC」即可找到{name}。\n进入医院页面，查看中韩文地址 📍、营业时间 ⏰、价格表 💰 及优惠活动。\n点击右下角【立即预约】或【咨询一下…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectiondata/hospital.json:9 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"url": "https://i.beautsgo.com/cn/hospital/dan-a-clinic?from=skill",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionskill-card.md:41 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- [BeautsGO DAN-A Clinic Page](https://i.beautsgo.com/cn/hospital/dan-a-clinic?from=skill)Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionskill-card.md:40 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- [BeautsGO DAN-A Clinic Booking Page](https://i.beautsgo.com/cn/hospital/dan-a-clinic/skill)Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectiondata/hospital.json:5 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"en_name": "DAN-A CLINIC",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectioni18n/en.json:12 · Prompt injection — known jailbreak technique reference · informational: not an instruction file… on Google Play, download the app 📲.\nIn the search bar, type \"明洞丹雅皮肤科\" or \"DAN-A CLINIC\" to find {name}.\nView clinic details: address, hours, prices and pro…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
Dense URL-encoded contentapi/skill.js:234 · Dense URL-encoded content — may be obfuscating payloads[App Store 下载](https://apps.apple.com/cn/app/beautsgo%E5%BD%BC%E6%AD%A4%E7%BE%8E-%E9%9F%A9%E5%9B%BD%E7%9A%AE%E8%82%A4%E7%A7%91%E9%A2%84%E7%BA%A6/id6741841509)Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
LOW
Prompt injectioni18n/en.json:11 · Prompt injection — known jailbreak technique reference · informational: not an instruction file…n the App Store, download the app 📥.\nIn the search bar, type \"明洞丹雅皮肤科\" or \"DAN-A CLINIC\" to find {name}.\nView address 📍, hours ⏰, price list 💰 and promoti…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionskill.json:8 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"DAN-A",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
HIGH
Hidden zero-width characters detectedapi/skill.js:296 · Hidden zero-width characters detected — may conceal content• 👨‍⚕️ 指定医生是否有档期Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
LOW
Prompt injectiondata/hospital.json:10 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"booking_url": "https://i.beautsgo.com/cn/hospital/dan-a-clinic/skill",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:9 · Prompt injection — known jailbreak technique reference- DAN-AFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectiondata/hospital.json:11 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"chat_slug": "dan-a-clinic",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈160 tok
1 file · 12 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

14 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim beautsgo: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
  3. Dense URL-encoded content≈ +2 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim beautsgoPropose a patch to the maintainer