ClawHub
Back to skill

Security audit

Lao Huangli

Security checks across malware telemetry and agentic risk

Overview

This skill is a calendar/almanac calculator whose code and instructions fit its stated purpose, with only a minor disclosure gap around Skyfield downloading a JPL ephemeris file if it is not already cached.

Before installing, be aware that first use may install Python dependencies and may download a JPL ephemeris file for astronomical calculations into a local cache. Use it for cultural/calendar reference, not for legal, medical, financial, or safety decisions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Context-Inappropriate Capability

Medium
Confidence
84% confidence
Finding
The Skyfield Loader will fetch the ephemeris file if it is missing, which introduces undeclared network access and external dependency retrieval during normal execution. In an agent skill advertised as a deterministic calendar/explanation workflow, implicit downloads expand the trust boundary, can leak environment metadata via outbound requests, and create supply-chain and reproducibility risks if network access is not expected or controlled.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.