ClawHub
Back to skill

Security audit

AIDraw批量图生图

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to automate the promised image-generation workflow, but it handles saved login sessions and browser cookies in a way users should review before installing.

Install only if you trust the publisher and are authorized to upload the selected images to timiai.woa.com. Before running, edit and verify the hardcoded source folder, prompt, and generation count; avoid sensitive or restricted images unless policy permits; and clear the saved browser profile after use if you do not want the login session retained.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill documentation describes code that reads local folders and accesses timiai.woa.com, but it declares no corresponding permissions. This creates a transparency and consent problem: users or platforms may not realize the skill can access local files and perform network actions, which is especially relevant because it also automates uploads and downloads.

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The README documents automated browser actions that upload local images to an internal web service and save generated files locally, but it does not clearly warn users that local content will be transmitted off disk to a remote service and that the tool will create/modify files on the filesystem. In a batch-processing tool, this omission increases the chance of unintended disclosure of sensitive images or accidental writes to unexpected locations, especially when users import the skill and run it with limited review.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill notes in passing that it saves login state, but it does not present this as a clear security warning or explain where credentials/session artifacts are stored, how long they persist, or who can reuse them. Persistent browser session state can allow unintended account access if stored insecurely or reused by other local users/processes.

Static analysis

No suspicious patterns detected.