ClawHub
Back to skill

Security audit

Poyo Wan 2 6

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward PoYo video-generation helper that discloses its API key, curl, and webhook-related behavior.

Install only if you intend to send generation prompts and media URLs to PoYo using your POYO_API_KEY. Prefer setting the API key in the environment rather than passing it as a command argument, and use callback_url only for endpoints you control and expect to receive generation status/results.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill explicitly instructs use of a shell script and requires the curl binary, but it does not declare corresponding permissions. This creates a capability/permission mismatch that can bypass expected review controls and makes it easier for later prompt or parameter injection to trigger outbound command execution without clear sandboxing expectations.

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The documentation encourages use of a user-supplied `callback_url` and states that PoYo will POST task results to it, but it does not warn that generation metadata or outputs may be transmitted to an external endpoint controlled by the caller. In an agent/skill context, this can enable silent exfiltration of prompts, task identifiers, or result URLs to third-party infrastructure if callback destinations are not constrained or clearly disclosed.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.