ClawHub
Back to skill

Security audit

eKYC Suite Media Labeling

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed thin client that sends user-selected KYC media to a configured cloud labeling service, with no evidence of hidden persistence or unrelated access.

Install only if your team has authority to process the submitted KYC media, has configured the HTTPS backend and API key intentionally, and understands that retention and downstream handling are governed by the cloud backend rather than this thin client.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
This client uploads the supplied media content and also forwards several environment-derived identifiers to a remote cloud service, but the code provides no explicit user-facing warning or consent mechanism at the point of transmission. In an eKYC context, the media is likely sensitive, so silent transmission increases privacy and compliance risk even if the behavior is functionally intended.

Hidden Instructions

High
Category
Prompt Injection
Content
# eKYC Suite 鍥惧儚鏍囩

## Current GEO Fit
Confidence
91% confidence
Finding
The file begins with a hidden Unicode byte-order mark/invisible character, which can be used to conceal instructions, alter parsing behavior, or evade simple scanners and policy checks. In a skill definition context, any hidden content is more concerning because downstream tooling may render or tokenize the file differently than reviewers expect.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.potential_exfiltration

Python code base64-encodes a local file and sends it over the network.

Critical
Code
suspicious.potential_exfiltration
Location
scripts/media_labeling.py:41