ClawHub
Back to skill

Security audit

BIMWing 三维模型在线浏览

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says: uploads user-selected BIM/CAD files to BIMWing for conversion and sharing, with disclosed credential and network use.

Install only if you intend to send BIM/CAD files to BIMWing. Prefer environment variables for credentials when possible; if you allow saved credentials, remember they are plaintext in config.local.json and should not be used on shared machines. Confirm the exact file path before upload because generated share links may be publicly viewable without login.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill clearly performs sensitive operations—reading environment variables, reading and writing local files, making network requests, and invoking CLI/runtime components—yet the metadata does not declare equivalent permissions in a machine-readable way. This creates a transparency and consent gap: a user or hosting platform may not be able to reliably enforce or review the skill's capabilities before execution, especially since the skill also handles plaintext credentials and uploads local files to a third-party service.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
This function automatically logs into a third-party service and uploads a local user-supplied file to a remote server, but the code itself provides no explicit runtime warning, confirmation, or boundary check before transmission. In this skill context, the upload is the intended feature, but the lack of an in-band consent step increases the risk of accidental exfiltration of sensitive local BIM/CAD models, which often contain proprietary architectural or infrastructure data.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.