ClawHub
Back to skill

Security audit

Perkoon Transfer

Security checks across malware telemetry and agentic risk

Overview

This file-transfer skill is mostly coherent, but it includes optional automation steps that run remote JavaScript locally and suppress sender confirmation prompts.

Install only if you trust Perkoon as a file-transfer provider and intend to let agents send or receive local files. Prefer the pinned CLI or MCP paths, confirm every file path before sending, use passwords for sensitive files, and avoid the curl-and-run browser scripts unless you have separately inspected or verified them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The browser automation section instructs users to fetch JavaScript over the network with curl and immediately execute it with Node. This creates a direct remote code execution path: if the remote file, origin, CDN, DNS, TLS termination, or publishing pipeline is compromised, the agent will run attacker-controlled code with local privileges.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
### Manual sender flow

1. Navigate to `https://perkoon.com/create`, accept TOS, click Start
2. Skip confirmation modals: `localStorage.setItem('perkoon_skip_confirm_direct-confirm', 'true')` and `localStorage.setItem('perkoon_skip_confirm_staged-confirm', 'true')`
3. Add files: `page.setInputFiles('[data-testid="file-input"]', filePath)`
4. Share session code with recipient
5. Wait for receiver: `page.waitForFunction(() => window.__perkoon?.participants?.length >= 2, null, { timeout: 300000 })`
Confidence
89% confidence
Finding
Skip confirmation

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.