ClawHub
Back to skill

Security audit

Mp2rss

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent mp2rss CLI helper, but users should handle the Feed Key carefully and avoid the piped shell installer.

Install only if you trust the mp2rss service and CLI publisher. Prefer the npm package or a downloaded release binary over the curl | sh installer, and treat MP2RSS_FEED_KEY as a secret bearer credential: use a trusted local terminal or secret store and avoid exposing it in shared shells, CI logs, chat, or diagnostics.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The README explicitly recommends passing the Feed Key via command-line flag and environment variable, but does not warn that CLI arguments may be exposed via shell history, process listings, logs, or CI job output. Because the Feed Key grants access to the user's RSS account, accidental disclosure could let another party read or manipulate account data depending on server-side permissions.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The documentation explicitly recommends an unattended `curl ... | sh` installation path without any warning about executing remote code, integrity verification, or the possibility of writing into system locations such as `/usr/local/bin`. Even in install docs, this is dangerous because a compromised upstream script, repository, transport path, or account could lead users to execute attacker-controlled code immediately on their machine.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.