ClawHub
Back to skill

Security audit

X to Kindle

Security checks across malware telemetry and agentic risk

Overview

The skill matches its stated purpose, but it asks users to store a Gmail app password in a plain Markdown file, so it should be reviewed before installation.

Review before installing. Use protected secret storage or a dedicated low-risk sending account instead of putting a Gmail app password in TOOLS.md, confirm the Kindle destination before sending, and understand that tweet links are fetched through fxtwitter and then emailed through your SMTP provider.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill explicitly instructs fetching tweet content from a third-party API and then forwarding that content plus sender/recipient email metadata through SMTP, but it does not require any user-facing disclosure or consent about those external transfers. This creates a real privacy risk because user-requested content, Kindle address, and email account usage are shared with external services outside the local agent context.

Missing User Warnings

High
Confidence
98% confidence
Finding
The configuration directs users to store a Gmail App Password in TOOLS.md, which is an unsafe secret-handling pattern because markdown files are often readable, logged, synced, or committed. Exposure of that app password could allow unauthorized access to the user's email-sending capability and potentially broader account abuse depending on provider configuration.

External Transmission

Medium
Category
Data Exfiltration
Content
User sends: `https://x.com/elonmusk/status/1234567890`

1. Fetch `https://api.fxtwitter.com/status/1234567890`
2. Extract author, text, timestamp
3. Send HTML email to Kindle address
4. Confirm: "Sent to Kindle 📚"
Confidence
83% confidence
Finding
https://api.fxtwitter.com/

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.