ClawHub
Back to skill

Security audit

Batch Cad Converter

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed batch CAD/BIM-to-Excel conversion helper that uses local files and local converter tools as expected for its purpose.

Install only if you are comfortable letting the skill read the CAD/BIM folders you select and write converted files and reports. Use trusted converter executables from known locations, review any converter options before running, and set explicit output paths to avoid accidental overwrites.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The manifest describes a batch converter for CAD/BIM files such as Revit, IFC, DWG, and DGN, which implies conversion among CAD/BIM-oriented outputs. The implementation unconditionally treats the expected output as an `.xlsx` file, indicating spreadsheet/data export behavior rather than CAD/BIM file conversion as described.

Intent-Code Divergence

Medium
Confidence
90% confidence
Finding
The class docstring states 'Batch convert multiple CAD/BIM files,' which suggests format conversion within the CAD/BIM domain. However, the conversion logic later defines success based on the existence of an `.xlsx` output file, contradicting that stated intent.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
This markdown file includes executable examples that perform bulk conversions, create an output folder, and write a JSON report, but it does not explicitly warn users that running the skill will create or overwrite artifacts on disk. For a batch-processing skill that can affect large file sets, a user-facing warning about filesystem changes is expected under the markdown criteria for missing user warnings.

Unvalidated Output Injection

High
Category
Output Handling
Content
# Execute
        try:
            result = subprocess.run(cmd, capture_output=True, text=True, timeout=3600)
            end_time = datetime.now()
            duration = (end_time - start_time).total_seconds()
Confidence
85% confidence
Finding
Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal