ClawHub
Back to skill

Security audit

eKYC Suite

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed cloud client for KYC media checks, but users should treat uploaded identity documents and biometric media as sensitive.

Install only if you have a trusted eKYC backend endpoint, a clear user-consent flow, and retention/access-control policies for identity documents, bank cards, face images, and videos. Do not use the outputs as the sole basis for legal, financial, or similarly high-impact decisions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
82% confidence
Finding
The trigger list includes broad natural-language phrases like 'Is this video real?' and 'deepfake detection' that can match ordinary user requests outside a narrowly scoped KYC workflow. If the agent auto-selects this skill from such phrases, it may send sensitive user media to a remote endpoint unexpectedly, creating privacy and consent risks even though the skill states it is for consented media.

Vague Triggers

Medium
Confidence
85% confidence
Finding
Generic OCR triggers like 'read ID card' and 'extract ID card info' are ambiguous and may activate on broad document-reading requests without sufficient privacy gating. Because this skill processes highly sensitive identity documents and transmits them to a cloud endpoint, accidental invocation could expose regulated personal data or cause collection beyond the user's intent.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
This client uploads highly sensitive identity media and OCR inputs to a remote backend, but this file provides no user-facing disclosure, consent prompt, destination visibility, or data-handling notice at the point of transmission. In an eKYC context, silent transmission of biometric and identity-document data materially increases privacy, compliance, and misuse risk because users may not realize their data leaves the local environment.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.potential_exfiltration

Python code base64-encodes a local file and sends it over the network.

Critical
Code
suspicious.potential_exfiltration
Location
scripts/ekyc_api.py:57