ClawHub
Back to skill

Security audit

LM Studio Discord Bot

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Discord bot template that sends Discord messages to a local LM Studio model, with privacy scoping cautions but no hidden or destructive behavior found.

Install only if you are comfortable with the bot reading messages in its accessible Discord channels and sending them to your local LM Studio service. Use a dedicated bot token, restrict the bot to trusted channels or a command trigger, avoid sensitive conversations, and tell server members that messages may be processed and locally logged.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs users to route Discord messages directly to a local LM Studio API but does not clearly warn that all Discord message content will be transmitted to and processed by that local model service. This is a real privacy/security documentation gap because users may expose private server content, sensitive prompts, or regulated data without understanding the data flow.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The bot forwards every Discord message verbatim to a separate LM Studio HTTP API without any disclosure, consent, or channel-level warning to users. Even though the endpoint is localhost, this still transfers user content to another service and may expose sensitive information to model logs, local plugins, or other processes on the host; the skill context increases concern because it is explicitly designed to bridge Discord users to a local LLM automatically.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.