ClawHub
Back to skill

Security audit

Coloring Page Generator

Security checks for vulnerabilities and agentic risk

Overview

This is a purpose-aligned coloring-page generator that uses a disclosed third-party AI API, with ordinary privacy, token-handling, and install-supply-chain risks to consider.

Install only from a source/version you trust, prefer a pinned or verified release where available, and treat prompts, reference UUIDs, and the Neta token as data sent to a third-party service. Use a short-lived/revocable Neta token and avoid putting confidential or regulated material in prompts.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
README.md:10
Finding

Unpinned Third-Party Installer and Skill Source

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
coloringpagegenerator.js:3
Finding

API Token Passed Through Process Command-Line Arguments

Content
View full analysis
). Pass it via the `--token` flag: ```bash node
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (9)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The README states the skill is powered by a third-party API but does not clearly warn users that their prompts, and potentially reference-image identifiers, are transmitted to an external service. This creates a privacy and data-handling risk because users may enter sensitive personal, proprietary, or regulated content assuming local processing.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The phrase "Use when someone asks to generate or create coloring page generator images" is loosely worded and does not define clear trigger boundaries. Terms like "generate" or "create" are common in everyday requests and the file provides no negative examples or constraints to distinguish when this skill should or should not activate.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
94% confidence
Finding

The install command uses npx skills add blammectrappora/coloring-page-generator without pinning a specific package version. This can cause users to fetch and execute whatever version is current at install time, increasing supply-chain risk if the upstream package is later compromised or changed maliciously.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

This code sends the user-supplied token in the x-token header to a remote API, which is a sensitive credential transmission. While the script requires the token argument, there is no comment, docstring, or user-facing notice explaining that the token and prompt will be sent to external services.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
85% confidence
Finding

The script packages the prompt into rawPrompt and posts it to an external endpoint for processing. Although this is part of the tool's function, there is no explicit disclosure in the file that user-provided content leaves the local system and is sent to a third-party service.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · coloringpagegenerator.js (reported line 108)May include surrounding context.

js
};
  }

  const makeRes = await request('POST', 'https://api.talesofai.com/v3/make_image', body);

  let taskUuid;
  if (typeof makeRes === 'string') {

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · coloringpagegenerator.js (reported line 122)May include surrounding context.

js
};
  }

  const makeRes = await request('POST', 'https://api.talesofai.com/v3/make_image', body);

  let taskUuid;
  if (typeof makeRes === 'string') {

Static analysis

No suspicious patterns detected.