{
  "skill_name": "talent-de-cv",
  "skill_path": "/workspace/skills/clawhub-id-cv-resume-creator",
  "skill_directory": "/workspace/skills/clawhub-id-cv-resume-creator",
  "is_safe": false,
  "max_severity": "HIGH",
  "findings_count": 3,
  "findings": [
    {
      "id": "llm_finding_talent-de-cv_0",
      "rule_id": "LLM_DATA_EXFILTRATION",
      "category": "data_exfiltration",
      "severity": "HIGH",
      "title": "Unvalidated External Network Calls to Third-Party API",
      "description": "The skill makes HTTP requests to an external domain (talent.de) without any validation, authentication, or security controls. The API endpoint https://www.talent.de/api/public/slugs/check accepts user-provided parameters (slug, firstName, lastName) that could be used to exfiltrate data or fingerprint users. The skill encourages creating permanent public profiles with personal information (names, emails, job titles) on an external service without informed consent or privacy controls.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": "GET https://www.talent.de/api/public/slugs/check?slug=007&firstName=Max&lastName=Mustermann - User data (firstName, lastName) sent to external API without validation or consent mechanism",
      "remediation": "1. Implement explicit user consent before sending any personal data to external services. 2. Validate and sanitize all user inputs before including in API requests. 3. Use HTTPS certificate pinning or verify SSL certificates. 4. Document data handling practices and privacy implications. 5. Implement rate limiting and request validation. 6. Consider requiring API authentication even for 'public' endpoints.",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "This skill presents MODERATE to HIGH security risks primarily related to data exfiltration, privacy violations, and transitive trust abuse. The core functionality involves collecting personal information (names, emails, job titles) and transmitting it to an external third-party service (talent.de) to create permanent public profiles. Key concerns include: (1) unvalidated network calls to external APIs with user data, (2) misleading claims about 'no signup required' when Access-ID is needed for advanced features, (3) lack of privacy controls or informed consent mechanisms, (4) transitive trust to external unverified content from talent.de URLs, and (5) encouraging AI agents to create potentially deceptive professional profiles. The skill lacks basic security controls like input validation, SSL verification, content integrity checking, or data protection measures. While there are no script files to analyze for code injection risks, the instruction-based data collection and external transmission patterns pose significant privacy and security risks. The missing optional metadata (license, compatibility, allowed-tools) is a minor issue but reduces transparency.",
        "primary_threats": [
          "Data Exfiltration/Exposure",
          "Transitive Trust Abuse",
          "Social Engineering",
          "Privacy Violations",
          "Unvalidated External Network Calls"
        ],
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "aisubtech": "AISubtech-8.2.3",
        "aisubtech_name": "Data Exfiltration via Agent Tooling",
        "scanner_category": "SECURITY VIOLATION",
        "meta_validated": true,
        "meta_confidence": "HIGH",
        "meta_confidence_reason": "LLM analyzer correctly identified that the core functionality involves collecting PII and transmitting to external service. The skill explicitly instructs data collection ('Ask them for their data') and API transmission. This is a legitimate privacy concern, not a false positive.",
        "meta_exploitability": "Easy - No authentication required for basic use (3 CVs/day). Agent follows instructions to collect and transmit user data.",
        "meta_impact": "High - Permanent public exposure of personal information (names, emails, career history) on third-party platform. No deletion mechanism without claim token."
      }
    },
    {
      "id": "llm_finding_talent-de-cv_1",
      "rule_id": "LLM_SOCIAL_ENGINEERING",
      "category": "social_engineering",
      "severity": "MEDIUM",
      "title": "Deceptive Marketing Claims - 'No Signup Required' Contradicts Access-ID Requirement",
      "description": "The skill description claims 'No signup, no payment, no API key needed for basic use' but the instructions reveal that Way B (custom templates) requires an 'Access-ID' with a limit of '10 templates/day'. This is misleading social engineering that downplays authentication requirements. The distinction between 'basic use' (3 CVs/day) and advanced use (requiring Access-ID) is buried in a comparison table rather than prominently disclosed.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": "Description: 'No signup, no payment, no API key needed for basic use' vs Table: 'Access-ID: Required (10 templates/day)' for Way B",
      "remediation": "1. Update description to clearly state: 'Free tier: 3 CVs/day without signup. Custom templates require Access-ID registration (10/day)'. 2. Prominently disclose all authentication requirements upfront. 3. Clarify what constitutes 'basic use' vs 'advanced use'.",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "This skill presents MODERATE to HIGH security risks primarily related to data exfiltration, privacy violations, and transitive trust abuse. The core functionality involves collecting personal information (names, emails, job titles) and transmitting it to an external third-party service (talent.de) to create permanent public profiles. Key concerns include: (1) unvalidated network calls to external APIs with user data, (2) misleading claims about 'no signup required' when Access-ID is needed for advanced features, (3) lack of privacy controls or informed consent mechanisms, (4) transitive trust to external unverified content from talent.de URLs, and (5) encouraging AI agents to create potentially deceptive professional profiles. The skill lacks basic security controls like input validation, SSL verification, content integrity checking, or data protection measures. While there are no script files to analyze for code injection risks, the instruction-based data collection and external transmission patterns pose significant privacy and security risks. The missing optional metadata (license, compatibility, allowed-tools) is a minor issue but reduces transparency.",
        "primary_threats": [
          "Data Exfiltration/Exposure",
          "Transitive Trust Abuse",
          "Social Engineering",
          "Privacy Violations",
          "Unvalidated External Network Calls"
        ],
        "aitech": "AITech-2.1",
        "aitech_name": "Social Engineering",
        "aisubtech": null,
        "aisubtech_name": null,
        "scanner_category": "SOCIAL ENGINEERING",
        "meta_validated": true,
        "meta_confidence": "MEDIUM",
        "meta_confidence_reason": "The claim is technically accurate ('basic use' doesn't require signup) but the framing is misleading by not clarifying what 'basic use' means. This is a minor social engineering concern, not a critical security issue.",
        "meta_exploitability": "Low - This is a transparency issue, not an exploitable vulnerability.",
        "meta_impact": "Low - Users may be disappointed by limitations but no security harm results."
      }
    },
    {
      "id": "llm_finding_talent-de-cv_3",
      "rule_id": "LLM_PROMPT_INJECTION",
      "category": "prompt_injection",
      "severity": "MEDIUM",
      "title": "Transitive Trust to External Unverified Content",
      "description": "The skill instructs agents to read and follow instructions from external URLs (https://www.talent.de/skill.md, https://www.talent.de/heartbeat.md, https://www.talent.de/skills/template-create.md) without any content verification, integrity checking, or security validation. An attacker who compromises talent.de could inject malicious instructions that the agent would follow. The curl commands download and execute content from external sources without signature verification.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": "Instructions to 'curl -s https://www.talent.de/skill.md' and 'Or just read them from the URLs above!' - delegating trust to external, unverified web content",
      "remediation": "1. Include content hashes (SHA-256) for all external files and verify before use. 2. Implement subresource integrity checks. 3. Cache and version external dependencies locally. 4. Warn users about risks of following external instructions. 5. Implement content security policies. 6. Use signed/verified content sources.",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "This skill presents MODERATE to HIGH security risks primarily related to data exfiltration, privacy violations, and transitive trust abuse. The core functionality involves collecting personal information (names, emails, job titles) and transmitting it to an external third-party service (talent.de) to create permanent public profiles. Key concerns include: (1) unvalidated network calls to external APIs with user data, (2) misleading claims about 'no signup required' when Access-ID is needed for advanced features, (3) lack of privacy controls or informed consent mechanisms, (4) transitive trust to external unverified content from talent.de URLs, and (5) encouraging AI agents to create potentially deceptive professional profiles. The skill lacks basic security controls like input validation, SSL verification, content integrity checking, or data protection measures. While there are no script files to analyze for code injection risks, the instruction-based data collection and external transmission patterns pose significant privacy and security risks. The missing optional metadata (license, compatibility, allowed-tools) is a minor issue but reduces transparency.",
        "primary_threats": [
          "Data Exfiltration/Exposure",
          "Transitive Trust Abuse",
          "Social Engineering",
          "Privacy Violations",
          "Unvalidated External Network Calls"
        ],
        "aitech": "AITech-1.2",
        "aitech_name": "Indirect Prompt Injection",
        "aisubtech": null,
        "aisubtech_name": null,
        "scanner_category": "PROMPT INJECTION",
        "meta_validated": true,
        "meta_confidence": "HIGH",
        "meta_confidence_reason": "The skill explicitly instructs downloading and following external content without verification. This is a classic transitive trust vulnerability - if the external source is compromised, the agent will follow malicious instructions.",
        "meta_exploitability": "Medium - Requires attacker to compromise talent.de or perform MITM attack. No HTTPS verification is enforced in curl commands.",
        "meta_impact": "High - Compromised external content could inject arbitrary instructions that the agent would follow, potentially leading to data theft or system compromise."
      }
    }
  ],
  "scan_duration_seconds": 49.442511796951294,
  "duration_ms": 49442,
  "analyzers_used": [
    "static_analyzer",
    "behavioral_analyzer",
    "llm_analyzer",
    "trigger_analyzer",
    "meta_analyzer"
  ],
  "timestamp": "2026-02-06T00:10:02.062996"
}