ClawHub
Back to skill

Security audit

Android Node

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims, but its setup and networking expose users to avoidable remote-code and local-network access risks.

Install only if you are comfortable reviewing Termux setup scripts and running an unauthenticated local Ollama service. Prefer using the included setup.sh after inspection instead of piping from the network, pin or verify downloaded binaries where possible, and run the node only on a trusted private network or behind firewall/VPN controls before sending sensitive prompts.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The skill instructs users to execute a shell script fetched directly from an external website without prior inspection or integrity verification. That creates a direct remote code execution path on the Android device, and if the hosting site, DNS, TLS termination, or author account is compromised, users will run attacker-controlled code immediately.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
Piping curl output straight into bash bypasses any meaningful review step and gives arbitrary network content immediate execution privileges in Termux. The absence of any warning, integrity check, or review guidance increases the chance that users will execute untrusted or modified code blindly.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The script explicitly instructs users to execute a remotely fetched shell script directly via `curl ... | bash`, which bypasses review of the downloaded content and enables silent execution of attacker-controlled code if the source is compromised or intercepted. The use of plain HTTP in the example further increases risk by allowing tampering in transit.

Missing User Warnings

High
Confidence
97% confidence
Finding
The generated startup script binds Ollama to `0.0.0.0:11434`, exposing the service on all network interfaces without any authentication, firewall guidance, or warning to the user. On a phone or shared network, this can allow unauthorized access, model abuse, data exposure, or use of the device as an unintended network service.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.