ClawHub
Back to skill

Security audit

eKYC Suite Face Compare

Security checks across malware telemetry and agentic risk

Overview

This skill is a focused face-comparison client that sends two user-provided face images to a configured HTTPS backend, with the main documentation disclosing the sensitive data flow and consent expectations.

Install only if you have authorization to process the face images, an appropriate retention policy, and a trusted HTTPS eKYC backend configured. Treat results as one review signal, not as standalone legal identity proof, and do not rely only on the short Chinese README for privacy guidance.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill documentation describes face comparison for KYC/eKYC workflows but does not warn users that the inputs and outputs involve highly sensitive biometric and identity data. In this context, missing handling guidance increases the chance that operators upload, store, share, or process face images insecurely, creating privacy, compliance, and misuse risks in a regulated onboarding flow.

Missing User Warnings

Medium
Confidence
81% confidence
Finding
The code transmits highly sensitive biometric data plus environment-derived identifiers to a remote service without any runtime notice, consent check, or visibility in this file. In an agent setting, that can cause operators or upstream tools to send regulated personal data to a third party without adequate user awareness or policy enforcement.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.potential_exfiltration

Python code base64-encodes a local file and sends it over the network.

Critical
Code
suspicious.potential_exfiltration
Location
scripts/face_compare.py:40