ClawHub
Back to skill

Security audit

Rdptunnel

Security checks across malware telemetry and agentic risk

Overview

This skill is coherent about creating an RDP tunnel, but it asks users to expose a powerful remote desktop service to the internet with persistent services and risky install shortcuts.

Review before installing. Use this only for deliberate, temporary RDP access to a machine you control. Prefer VPN, bastion, or IP-restricted access where possible; require strong unique credentials, NLA, restricted users, monitoring, and stop/disable both the tunnel and RDP/xrdp when finished. Avoid the curl-to-bash or irm-to-iex install paths unless you have independently verified the installer.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

High
Confidence
98% confidence
Finding
The skill’s primary purpose is to expose an RDP service to the public internet, a high-risk administrative surface frequently targeted for brute force, credential stuffing, and post-authentication compromise. Although later sections mention security recommendations, the document lacks an upfront, prominent risk warning before instructing users to publish RDP externally, which materially increases the chance of unsafe deployment.

Session Persistence

Medium
Category
Rogue Agent
Content
# Start xrdp service
sudo systemctl start xrdp
sudo systemctl enable xrdp

# Verify it is listening on port 3389
ss -tlnp | grep :3389
Confidence
87% confidence
Finding
systemctl enable

External Script Fetching

High
Category
Supply Chain
Content
## CLI Reference

The `aitun` command (installed via `pip install aitun`, or alternatively `curl -fsSL https://aitun.cc/install.sh | bash` / `irm https://aitun.cc/install.ps1 | iex` on Windows) accepts these flags:

| Flag | Description |
|---|---|
Confidence
96% confidence
Finding
curl -fsSL https://aitun.cc/install.sh | bash

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.