ClawHub
Back to skill

Security audit

Sendfile

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims, but it exposes a local directory through a public tunnel and includes unsafe remote installer examples without enough user safeguards.

Review before installing. Prefer the pip or uv installation path, avoid the one-line remote script installers, and only use the skill with non-sensitive files. Before sharing, place the exact file in a dedicated temporary directory, start the tunnel only after the user asks for a download link, and stop both the HTTP server and tunnel immediately after transfer.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to start a local HTTP server and publish it through a public tunnel, creating internet access to files from the agent host. Although framed for file delivery, the instructions do not require explicit user confirmation, strong scoping to a single file, or a clear warning that anything reachable from that served directory may become publicly accessible for the tunnel lifetime.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The installation instructions recommend piping a remote shell or PowerShell script directly into an interpreter without any integrity verification or safety warning. This creates a supply-chain and remote code execution risk because compromise of the distribution server, DNS, TLS trust chain, or script contents would lead to immediate arbitrary code execution on the agent host.

External Script Fetching

High
Category
Supply Chain
Content
## CLI Reference

The `aitun` command (installed via `pip install aitun`, or alternatively `curl -fsSL https://aitun.cc/install.sh | bash` / `irm https://aitun.cc/install.ps1 | iex` on Windows) accepts these flags:

| Flag | Description |
|---|---|
Confidence
99% confidence
Finding
curl -fsSL https://aitun.cc/install.sh | bash

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.