ClawHub
Back to skill

Security audit

patent-download

Security checks across malware telemetry and agentic risk

Overview

The skill is mostly aligned with patent downloading, but its wrapper can automatically install unpinned packages and a Chromium browser during normal use.

Review before installing. Prefer running the documented python cli.py path in a virtual environment and installing dependencies manually after review, rather than using scripts/patent-download.sh. Only configure PATENT_* credentials for accounts you are comfortable using with browser/API automation, and check each platform's terms before bulk downloading.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (7)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill declares substantial capabilities in its documentation and usage flow—environment variable access, local file read/write, network access, and shell execution—yet no explicit permissions are declared. This creates a transparency and consent gap: users or orchestration systems may invoke a skill with broader access than expected, including auto-installing packages and accessing credentials, which increases abuse and supply-chain risk.

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The wrapper automatically installs Python packages and browser binaries onto the host when dependencies are missing. Even if intended for convenience, this expands the tool’s privileges beyond simple patent downloading, introduces supply-chain risk from network-fetched packages, and modifies the execution environment without explicit approval.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script performs `pip install`, installs requirements, and downloads Chromium without any explicit user confirmation beyond status messages. In an agent or automation context, this can silently trigger host changes, outbound network access, and execution of unreviewed package install scripts, making the skill materially more dangerous than its stated download-only purpose suggests.

Unpinned Dependencies

Low
Category
Supply Chain
Content
# Google Patents SDK（推荐通道，免费免登录）
patent-downloader

# 浏览器自动化（度衍/粤港澳等通道）
playwright
Confidence
98% confidence
Finding
patent-downloader

Unpinned Dependencies

Low
Category
Supply Chain
Content
patent-downloader

# 浏览器自动化（度衍/粤港澳等通道）
playwright

# HTTP请求（PatentStar等API通道）
requests
Confidence
99% confidence
Finding
playwright

Unpinned Dependencies

Low
Category
Supply Chain
Content
playwright

# HTTP请求（PatentStar等API通道）
requests
Confidence
99% confidence
Finding
requests

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
95% confidence
Finding
requests

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.