ClawHub
Back to skill

Security audit

Emby Tv Organizer

Security checks across malware telemetry and agentic risk

Overview

This TV-library organizer appears legitimate, but it should be reviewed because its Excel helper can install a Python package during normal use without a documented setup step.

Review the rename plan carefully before approving file operations. Install a trusted, pinned openpyxl dependency through your normal environment setup before using the Excel feature, and verify the script path points to the installed skill copy.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
except ImportError:
    print("缺少 openpyxl，正在安装...")
    import subprocess
    subprocess.check_call([sys.executable, "-m", "pip", "install", "openpyxl", "-q"])
    import openpyxl
    from openpyxl.styles import Font, PatternFill, Alignment, Border, Side
    from openpyxl.utils import get_column_letter
Confidence
97% confidence
Finding
subprocess.check_call([sys.executable, "-m", "pip", "install", "openpyxl", "-q"])

Context-Inappropriate Capability

Medium
Confidence
99% confidence
Finding
Auto-installing a Python package during normal script execution is a real security weakness because it causes implicit external code retrieval and execution outside of the user's explicit consent or standard dependency management workflow. In this skill's context, the stated purpose is local Excel generation for media organization, so silently mutating the environment and contacting package infrastructure is not justified and increases attack surface.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script invokes pip via subprocess without prior warning in the documented behavior, meaning users may execute it expecting offline/local file processing but instead trigger package installation and possible network access. This lack of transparency is dangerous because it can violate operational assumptions, break reproducibility, and expose systems to dependency-install-time code execution risks.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.