ClawHub
Back to skill

Security audit

Playwright Service

Security checks across malware telemetry and agentic risk

Overview

This skill does the advertised browser screenshot/scraping work, but it also directs screenshots to a hard-coded Telegram group without clear user control or scoping.

Install only if you control or trust the 192.168.0.9 backend and the Telegram group. Do not use it for private dashboards, authenticated pages, customer data, or internal systems unless the skill is changed to require explicit approval and a user-selected destination before sending screenshots externally.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs taking a webpage screenshot and then sending the captured file to a Telegram group, but provides no warning, consent flow, or restriction on what pages may be captured. This creates a real risk of exfiltrating sensitive visual data from internal sites, authenticated sessions, or user-provided URLs to an external messaging destination.

Ssd 3

Medium
Confidence
96% confidence
Finding
The natural-language workflow tells the operator to transmit captured webpage data to an external Telegram group. In context, this is dangerous because screenshots can include confidential content, session-dependent pages, internal dashboards, or personal data, and the instruction normalizes exporting that data outside the local environment.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.