ClawHub
Back to skill

Security audit

Art Deco Generator

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward art-deco image generator that calls a disclosed external image API, with no hidden persistence or destructive behavior found.

Install only if you are comfortable sending your image prompts, optional reference image UUIDs, and Neta API token to the TalesOfAI/Neta service. Avoid putting a real token in shared terminals, CI logs, or recorded sessions, and prefer a pinned or verified install path when available.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
README.md:7
Finding

Unpinned Package Execution Through npx Installation Instructions

Content
View full analysis
Remediation
View remediation
add blammectrappora/art-deco-generator ``` 2. Where supported, pin the installed skill to an immutable version, commit, or content digest. 3. Document the expected npm registry and package publisher so users can detect unexpected resolution sources. 4. Publish and verify package integrity metadata or signed release artifacts. 5. Provide a manual installation alternative that lets users inspect files before executing third-party installer code. 6. Advise users not to run the installation command with administrative or root privileges. 7. Review the pinned installer and its dependency lockfile before recommending it as a trusted installation path. ]]>

T09 · Insecure Skill Coding Practices

Warning
Location
artdecogenerator.js:20
Finding

API Token Exposed Through Command-Line Arguments

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (8)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The README states the skill is powered by an external image-generation API and shows users passing prompts, tokens, and optional reference image UUIDs, but it does not clearly warn that user prompts and reference identifiers will be transmitted to a third-party service. This creates a meaningful privacy and data-handling risk, especially because users may include sensitive creative material, proprietary branding concepts, or identifying image references without realizing they leave the local environment.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding

The skill declares only tools: Bash and provides no explicit tool scope or permission boundary, yet its documented behavior depends on calling an external API using a user-supplied token. That mismatch can cause reviewers or execution frameworks to underestimate network-capable behavior, increasing the chance of unintended outbound requests or token exposure through shell-based networking.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation description says to use the skill when someone asks to 'generate or create art deco design generator images,' which is a broad natural-language condition rather than a specific trigger or constrained context. It does not provide boundaries, exclusions, or negative examples, so ordinary requests about art deco image creation could ambiguously match.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
84% confidence
Finding

Using npx skills add blammectrappora/art-deco-generator without a pinned version allows installation of whatever package version is current at execution time. If the upstream package is compromised or a malicious update is published, users may install and execute unreviewed code.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
70% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · artdecogenerator.js (reported line 71)May include surrounding context.

js
console.error(`→ Submitting prompt (${dims.width}×${dims.height})...`);

  const submitRes = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers,
    body: JSON.stringify(body),

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · artdecogenerator.js (reported line 71)May include surrounding context.

js
console.error(`→ Submitting prompt (${dims.width}×${dims.height})...`);

  const submitRes = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers,
    body: JSON.stringify(body),

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · artdecogenerator.js (reported line 102)May include surrounding context.

js
console.error(`→ Submitting prompt (${dims.width}×${dims.height})...`);

  const submitRes = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers,
    body: JSON.stringify(body),

Static analysis

No suspicious patterns detected.