ClawHub
Back to skill

Security audit

App Icon Generator

Security checks for vulnerabilities and agentic risk

Overview

This app-icon skill is a straightforward remote image-generation helper, but users should treat its API token and prompts as data sent to a third-party service.

Install only from a trusted ClawHub/source path, avoid running the unpinned npx installer as an administrator, and assume your prompt, optional reference UUID, and Neta API token are sent to api.talesofai.com. Prefer a disposable or limited-scope token, and be aware that passing tokens on the command line can expose them in shell history, process listings, or logs.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:32
Finding

Unpinned npx Installer Creates a Mutable Supply-Chain Execution Path

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
appicongenerator.js:10
Finding

API Token Is Accepted Through Process Command-Line Arguments

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (9)

Tp4

High
Category
MCP Tool Poisoning
Confidence
93% confidence
Finding

The documented purpose is narrowly framed as app-icon generation, but the behavior described by analysis indicates broader image generation, additional output modes unrelated to icons, reference-based inheritance, and possible use of different backend endpoints. This mismatch is dangerous because reviewers and users may grant trust, tokens, or automation privileges based on a narrower capability set than the skill actually exercises.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding

The README instructs users to install and run tooling via npx skills without pinning a specific version. This allows whatever package version is currently published under that name to be fetched and executed at install time, creating a supply-chain risk if the package is compromised, renamed, or updated maliciously.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
86% confidence
Finding

The skill declares Bash tooling but does not constrain tool scope with explicit permissions or allowed-tools, even though the documented behavior depends on network access to an external API. In an agent setting, missing scope boundaries can allow broader-than-expected tool use and make review/auditing harder, increasing the chance of unintended external communication or capability abuse.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The activation guidance says to use the skill when someone asks to generate or create app icon generator images, which is broad enough to trigger on generic image-generation requests. Over-broad activation can cause the skill to be selected outside its intended niche, exposing tokens, invoking external services unnecessarily, or bypassing safer/more appropriate workflows.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
84% confidence
Finding

Using npx skills add blammectrappora/app-icon-generator without pinning a version introduces supply-chain risk because the installed package can change over time. A later malicious or compromised release could be fetched implicitly by users, leading to execution of unreviewed code in their environment.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
70% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · appicongenerator.js (reported line 76)May include surrounding context.

js
async function main() {
  // Submit the image generation task
  const createRes = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers,
    body: JSON.stringify(body),

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · appicongenerator.js (reported line 76)May include surrounding context.

js
async function main() {
  // Submit the image generation task
  const createRes = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers,
    body: JSON.stringify(body),

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · appicongenerator.js (reported line 116)May include surrounding context.

js
async function main() {
  // Submit the image generation task
  const createRes = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers,
    body: JSON.stringify(body),

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This code sends user-supplied prompt content to an external API and authenticates with a token in request headers. Although the behavior is functionally necessary for image generation, the script lacks any explicit disclosure beyond usage syntax that user input and credentials will be transmitted to a third-party service.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.