ClawHub
Back to skill

Security audit

科技新闻日报

Security checks across malware telemetry and agentic risk

Overview

The skill mostly matches a news-reporting workflow, but it embeds Feishu credentials and automatically grants full document access to a fixed account.

Review this carefully before installing. It is not just a local news-report generator: it publishes to a specific Feishu workspace/chat and grants full access to a specific Feishu member using an embedded secret. Only use it if you control those Feishu resources, trust the fixed recipient, and replace the hard-coded credential with a properly managed secret and explicit approval before sharing.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (9)

Context-Inappropriate Capability

High
Confidence
99% confidence
Finding
The skill embeds a hard-coded Feishu app_id/app_secret and instructs the agent to use them to obtain a tenant access token, then grant full_access permissions to a specific member. This exceeds the stated news-reporting purpose and creates a direct secret-exposure and privilege-modification path if the skill is executed or copied.

Missing User Warnings

High
Confidence
98% confidence
Finding
The instructions direct use of sensitive credentials and external API calls without any meaningful warning, approval step, or boundary on permission changes. Because the skill both authenticates to Feishu and alters document permissions for a named account, it can expose secrets and modify access control outside the user's immediate awareness.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The fallback path describes direct OpenAPI authentication using an app_secret and subsequent document API operations, but omits safeguards around secret handling and external transmission. Even though one placeholder is used in part of the fallback, the documented pattern encourages unsafe credential use and broad outbound API interaction.

External Transmission

Medium
Category
Data Exfiltration
Content
--content @memory/YYYY-MM-DD-tech-news.xml

# 步骤 3：授予张公子 full_access 权限（用 Open API 直接调，绕过 lark-cli 交互限制）
ACCESS_TOKEN=$(curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal' \
  -H 'Content-Type: application/json' \
  -d '{"app_id": "cli_a94b4a1e43781cc7", "app_secret": "NALleHubGWREfZJkXpYizwszPIBFIBq7"}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin).get('tenant_access_token',''))")
Confidence
97% confidence
Finding
curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal' \ -H 'Content-Type: application/json' \ -d

External Transmission

Medium
Category
Data Exfiltration
Content
-d '{"app_id": "cli_a94b4a1e43781cc7", "app_secret": "NALleHubGWREfZJkXpYizwszPIBFIBq7"}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin).get('tenant_access_token',''))")

curl -s -X POST 'https://open.feishu.cn/open-apis/drive/v1/permissions' \
  -H 'Authorization: Bearer '$ACCESS_TOKEN \
  -H 'Content-Type: application/json' \
  -d '{
Confidence
97% confidence
Finding
curl -s -X POST 'https://open.feishu.cn/open-apis/drive/v1/permissions' \ -H 'Authorization: Bearer '$ACCESS_TOKEN \ -H 'Content-Type: application/json' \ -d '{ "type": "docx", "token":

External Transmission

Medium
Category
Data Exfiltration
Content
| python3 -c "import sys,json; print(json.load(sys.stdin).get('tenant_access_token',''))")

# 2. 在知识库「科技新闻日报」节点下创建 wiki 节点
curl -s -X POST 'https://open.feishu.cn/open-apis/wiki/v2/spaces/7621391289904516315/nodes' \
  -H 'Authorization: Bearer '$ACCESS_TOKEN \
  -H 'Content-Type: application/json' \
  -d '{"parent_node_token": "Iv9UwDW5viSJDWk12j7cBazYn8b", "node_type": "origin", "obj_type": "docx", "title": "科技新闻日报 | YYYY年MM月DD日"}'
Confidence
88% confidence
Finding
curl -s -X POST 'https://open.feishu.cn/open-apis/wiki/v2/spaces/7621391289904516315/nodes' \ -H 'Authorization: Bearer '$ACCESS_TOKEN \ -H 'Content-Type: application/json' \ -d

External Transmission

Medium
Category
Data Exfiltration
Content
# → 获得 obj_token

# 3. 写入文档内容（batch create blocks，XML 格式）
curl -s -X POST 'https://open.feishu.cn/open-apis/docx/v1/documents/<obj_token>/blocks/<root_block_id>/children' \
  -H 'Authorization: Bearer '$ACCESS_TOKEN \
  -H 'Content-Type: application/json' \
  -d '{"children": [...]}'
Confidence
87% confidence
Finding
curl -s -X POST 'https://open.feishu.cn/open-apis/docx/v1/documents/<obj_token>/blocks/<root_block_id>/children' \ -H 'Authorization: Bearer '$ACCESS_TOKEN \ -H 'Content-Type: application/json' \

External Script Fetching

High
Category
Supply Chain
Content
--content @memory/YYYY-MM-DD-tech-news.xml

# 步骤 3：授予张公子 full_access 权限（用 Open API 直接调，绕过 lark-cli 交互限制）
ACCESS_TOKEN=$(curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal' \
  -H 'Content-Type: application/json' \
  -d '{"app_id": "cli_a94b4a1e43781cc7", "app_secret": "NALleHubGWREfZJkXpYizwszPIBFIBq7"}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin).get('tenant_access_token',''))")
Confidence
95% confidence
Finding
curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal' \ -H 'Content-Type: application/json' \ -d '{"app_id": "cli_a94b4a1e43781cc7", "app_secret": "NALleHubGWREfZ

External Script Fetching

High
Category
Supply Chain
Content
-d '{"app_id": "cli_a94b4a1e43781cc7", "app_secret": "NALleHubGWREfZJkXpYizwszPIBFIBq7"}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin).get('tenant_access_token',''))")

curl -s -X POST 'https://open.feishu.cn/open-apis/drive/v1/permissions' \
  -H 'Authorization: Bearer '$ACCESS_TOKEN \
  -H 'Content-Type: application/json' \
  -d '{
Confidence
93% confidence
Finding
curl -s -X POST 'https://open.feishu.cn/open-apis/drive/v1/permissions' \ -H 'Authorization: Bearer '$ACCESS_TOKEN \ -H 'Content-Type: application/json' \ -d '{ "type": "docx", "token":

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.