ClawHub
Back to skill

Security audit

Locate your position on modern Windows

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims by showing how to get the Windows device location, but users should treat the resulting coordinates as sensitive private information.

Install or use this only when you explicitly want the agent to access this Windows device's current location. Treat the latitude and longitude as sensitive, and do not paste them into reverse-geocoding services unless you are comfortable sharing that location with the service provider.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger language is broad enough that an agent could invoke this skill when a user asks generally to 'find their position' or 'locate themselves' without making it explicit that precise device geolocation will be accessed. Because the skill retrieves sensitive physical location from the local OS, unintended invocation can disclose highly sensitive data even if no external exfiltration occurs.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill description and usage do not prominently warn that it accesses and outputs the device’s precise geographic coordinates, which are sensitive personal data. Without an explicit warning and consent cue, users may not understand that running the skill discloses their current physical location with meter-level accuracy.

External Transmission

Medium
Category
Data Exfiltration
Content
Use the coordinates with any free reverse-geocoding service:

```bash
curl -s "https://api.bigdatacloud.net/data/reverse-geocode-client?latitude=35.6762&longitude=139.6503"
```

## Troubleshooting
Confidence
85% confidence
Finding
The reverse-geocoding example sends latitude and longitude to a third-party service, which constitutes external transmission of sensitive location data. Even though it is presented as optional documentation and not embedded in the PowerShell script, users may copy it directly and disclose precise coordinates to an external provider without understanding the privacy implications.

Static analysis

No suspicious patterns detected.