ClawHub
Back to skill

Security audit

Nuwa World - OSINT Human Research

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but it enables third-party face search and person research without enough consent, privacy, or lawful-use guidance.

Install only if you are comfortable sending uploaded face images and research queries to Nuwa's service. Use it only with images and people you are authorized to investigate, keep the API key in an environment variable, and review the provider's privacy, retention, and legal terms before use.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Missing User Warnings

High
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill explicitly instructs users to upload face images to a third-party API for internet-wide matching, which involves transmission of highly sensitive biometric data. The documentation does not provide an explicit privacy warning, consent requirement, retention/disclosure notice, or guidance on lawful use, making accidental misuse and non-compliant handling of biometric data materially more likely.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The README promotes face search and open-web person research, which are privacy-sensitive capabilities involving biometric and personal data, but it does not warn users about consent, lawful basis, or the risks of identifying or profiling individuals. In this skill context, that omission is more dangerous because the documented workflow makes surveillance-style use straightforward for an agent operator.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
90% confidence
Finding

This documented API call uploads a face image and API credential to an external endpoint, which is a real external-transmission behavior. In context, the risk is elevated because the transmitted content is biometric data tied to identity search, so misuse or uninformed use can expose highly sensitive personal information to a third party.

Content

Scanner excerpt · README.md (reported line 29)May include surrounding context.

POST /face-search with multipart form data:

bash
curl -X POST https://gateway.nuwa.world/api/v1/face-search \
  -H "X-API-Key: $NUWA_API_KEY" \
  -F "image=@photo.jpg"

Session Persistence

Medium
Category
Rogue Agent
Confidence
60% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · README.md (reported line 95)May include surrounding context.

bash
cd /path/to/your-project

mkdir -p .cursor/skills
cp -r /path/to/nuwa-world-api-skill .cursor/skills/nuwa-world-api-skill

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 11)May include surrounding context.

md
env:
        - NUWA_API_KEY
      bins:
        - curl
    primaryEnv: NUWA_API_KEY
    emoji: "🔍"
    homepage: https://gateway.nuwa.world/docs

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The README instructs users to configure an API key and send requests to a third-party service, but it does not clearly warn that images, queries, and metadata will leave the local environment and be transmitted to Nuwa's infrastructure. In an agent skill, this matters because users may assume local processing while the skill is actually enabling external disclosure of potentially sensitive inputs.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.