Skills/ClawHub/web-security-test-rules

web-security-test-rules@0.2.0

CAUTION· static only

Publisher claims: "通用网站安全测试（授权渗透测试）规则与检查清单。当用户要求对网站 / Web 应用做安全测试、漏洞扫描、渗透测试、安全评估，或提到安全测试规则、最小影响测试、隐蔽测试、漏洞复查、授权门禁时使用。核心强调：必须获得授权（默认开启授权门禁，主用非对称签名授权令牌验证 AUTHORIZATION.json + 公钥验签，其余为备选）、最小影响、测试后还原、规范报告、不破坏目标、禁止跳出授权范围（含外站关联尝试须授权，规则 23）。关键词：网站安全测试、授权渗透测试、安全规则、漏洞测试、安全评估、渗透测试规范、web 安全、最小影响、隐蔽测试、授权门禁、签名授权、授权验证、mowenfalse、mowenbrokentrue、mowenwaitrue、禁止越界、外站授权" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher mowenqwq · publishing for 81 daysInstalls 862Last detonated 7d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-07 and scored it 65/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

LOW
URL to a private-network addressSKILL.md:54 · URL to a private-network address — a LAN or development target- `scope{}`：**明确测试范围**，含 `in_scope[]`（显式目标 / 路径前缀）、`internal_ranges[]`（内网 CIDR / 主机，如 `10.0.0.0/8`、`http://10.0.0.5:8080`）、`include_internal`（是否含内网）、`out_of_scope[]`（显式排除项）、`accounts[]`（授权测试账号）Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathslocales/en/SKILL.md:373 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **D8 Info leak**: `.git` / `.env` / backup exposure, unauthorized Swagger / Docs, verbose errors / stack traces, directory listing.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addressreferences/authorization_template.json:20 · URL to a private-network address — a LAN or development target"http://10.0.0.5:8080",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresslocales/en/SKILL.md:52 · URL to a private-network address — a LAN or development target- `scope{}`: **explicit test scope**, including `in_scope[]` (explicit targets / path prefixes), `internal_ranges[]` (internal CIDRs / hosts, e.g. `10.0.0.0/8`, `http://10.0.0.5:8080`), `include_interFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsSKILL.md:378 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **D8 信息泄露**：`.git` / `.env` / 备份暴露、Swagger / Docs 未授权、详细报错 / 堆栈、目录列举。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
Rule modification attemptlocales/en/references/report_template.md:37 · Rule modification attempt — overwriting existing instructions · informational: not an instruction file · informational: not an instruction file · informational: not an instruction file### Operation Log (rule 20: one entry per action, fill immediately, no backfill from memory)Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
URL to a private-network addressreferences/authorization_template.json:20 · URL to a private-network address — a LAN or development target"http://10.0.0.5:8080",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresslocales/en/references/authorization_template.json:20 · URL to a private-network address — a LAN or development target"http://10.0.0.5:8080",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresslocales/en/SKILL.md:52 · URL to a private-network address — a LAN or development target- `scope{}`: **explicit test scope**, including `in_scope[]` (explicit targets / path prefixes), `internal_ranges[]` (internal CIDRs / hosts, e.g. `10.0.0.0/8`, `http://10.0.0.5:8080`), `include_interFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addressSKILL.md:54 · URL to a private-network address — a LAN or development target- `scope{}`：**明确测试范围**，含 `in_scope[]`（显式目标 / 路径前缀）、`internal_ranges[]`（内网 CIDR / 主机，如 `10.0.0.0/8`、`http://10.0.0.5:8080`）、`include_internal`（是否含内网）、`out_of_scope[]`（显式排除项）、`accounts[]`（授权测试账号）Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresslocales/en/references/authorization_template.json:20 · URL to a private-network address — a LAN or development target"http://10.0.0.5:8080",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈14,182 tok
2 files · 18 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

15 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim mowenqwq: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. URL to a private-network address≈ +1 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim mowenqwqPropose a patch to the maintainer