ClawHub
Back to skill

Security audit

AHKB-CPS — 阿色全息知识库建产系统

Security checks across malware telemetry and agentic risk

Overview

This is mostly a coherent local knowledge-base tool, but it persistently broadens agent permissions and automatically installs dependencies, so users should review it before installing.

Install only in a dedicated Vault/workspace, not a sensitive home or project root. Review or avoid running setup-permissions unless you intentionally want broad Claude permissions persisted in .claude/settings.json. Prefer a virtual environment with pinned dependencies, and expect the skill to scan, move, create, and trash files inside the selected workspace.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (12)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
def copy_to_clipboard(text):
    """Copy text to clipboard using Windows clip command."""
    try:
        proc = subprocess.Popen(['clip'], stdin=subprocess.PIPE, shell=True)
        proc.communicate(text.encode('utf-8'))
        print("[OK] Copied to clipboard!", file=sys.stderr)
    except Exception as e:
Confidence
94% confidence
Finding
proc = subprocess.Popen(['clip'], stdin=subprocess.PIPE, shell=True)

Hidden Instructions

High
Category
Prompt Injection
Content
O�ǓB�_9.�_m����C�0]:�3ɘ�Kv,���?�!��}��Y;�P�Wa��9	��B�n�����j�#b�:��;&��C�&��89�Ί� ��~NE���i�'��M�:mv�T\_:�~��u��ar:�n!����'ර����爳�π
^:�G$�9
&I'd�M3�bY�,G
���D�J��$�	@�q���I6M�]�sgDyO�
��כ���h�ڍ��n�bLMG�⚁YR�=���_
�V��u����0_������N�,���j����
4�3A��@P]���Q��z0rU��2
Confidence
94% confidence
Finding
‮

Unpinned Dependencies

Low
Category
Supply Chain
Content
jieba>=1.0.0
Confidence
94% confidence
Finding
jieba>=1.0.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
python-pptx>=1.0.0
python-docx>=1.1.0
openpyxl>=3.1.0
pymupdf>=1.24.0
Confidence
92% confidence
Finding
python-pptx>=1.0.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
python-pptx>=1.0.0
python-docx>=1.1.0
openpyxl>=3.1.0
pymupdf>=1.24.0
Pillow>=10.0.0
Confidence
92% confidence
Finding
python-docx>=1.1.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
python-pptx>=1.0.0
python-docx>=1.1.0
openpyxl>=3.1.0
pymupdf>=1.24.0
Pillow>=10.0.0
jieba>=1.0.0
Confidence
92% confidence
Finding
openpyxl>=3.1.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
python-pptx>=1.0.0
python-docx>=1.1.0
openpyxl>=3.1.0
pymupdf>=1.24.0
Pillow>=10.0.0
jieba>=1.0.0
Confidence
92% confidence
Finding
pymupdf>=1.24.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
python-docx>=1.1.0
openpyxl>=3.1.0
pymupdf>=1.24.0
Pillow>=10.0.0
jieba>=1.0.0
Confidence
97% confidence
Finding
Pillow>=10.0.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
openpyxl>=3.1.0
pymupdf>=1.24.0
Pillow>=10.0.0
jieba>=1.0.0
Confidence
90% confidence
Finding
jieba>=1.0.0

Known Vulnerable Dependency: Pillow==10.0.0 — 10 advisory(ies): CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2024-28219 (Pillow buffer overflow vulnerability); CVE-2026-55379 (Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()`) +7 more

Critical
Category
Supply Chain
Confidence
98% confidence
Finding
Pillow==10.0.0

Tool Parameter Abuse

High
Category
Tool Misuse
Content
def copy_to_clipboard(text):
    """Copy text to clipboard using Windows clip command."""
    try:
        proc = subprocess.Popen(['clip'], stdin=subprocess.PIPE, shell=True)
        proc.communicate(text.encode('utf-8'))
        print("[OK] Copied to clipboard!", file=sys.stderr)
    except Exception as e:
Confidence
88% confidence
Finding
subprocess.Popen(['clip'], stdin=subprocess.PIPE, shell=True

Tool Parameter Abuse

High
Category
Tool Misuse
Content
def copy_to_clipboard(text):
    """Copy text to clipboard using Windows clip command."""
    try:
        proc = subprocess.Popen(['clip'], stdin=subprocess.PIPE, shell=True)
        proc.communicate(text.encode('utf-8'))
        print("[OK] Copied to clipboard!", file=sys.stderr)
    except Exception as e:
Confidence
88% confidence
Finding
Popen(['clip'], stdin=subprocess.PIPE, shell=True

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.