ClawHub
Back to skill

Security audit

Geo Mass Publish Check

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims, but it handles a reusable API key in a risky way and can automatically write downloaded ZIP files to the user’s machine.

Review this skill before installing. Use it only if you trust the GEO SaaS endpoint and the publisher, and prefer storing the API key in the documented local key file instead of pasting it into chat. Expect it to contact ai.gaobobo.cn, verify the key, download ZIP exports into ~/.qclaw/geo-exports, and report local path hints back to the service.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly instructs reading an API key from local dotfiles and sending it in Authorization headers to a remote service, but it does not clearly disclose this credential access/transmission to the user at runtime. That creates a real secret-handling risk: users may not realize the skill is pulling sensitive credentials from disk and reusing them for network requests, and the fallback path encourages secret submission through chat.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill downloads ZIP archives onto the local filesystem and reports their local paths, but it does not provide an explicit warning that it will create files on the user's machine. Silent local writes can surprise users, consume disk space, and introduce risk if the downloaded content is untrusted or later processed by other tools.

Ssd 3

Medium
Confidence
97% confidence
Finding
The skill tells the user to paste an API key directly into chat if no local key file exists, which risks exposing credentials in plain conversation logs, agent memory, or downstream telemetry. Collecting reusable secrets through chat is a strong anti-pattern because it increases the chance of accidental retention, replay, and disclosure beyond the intended service call.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.