ClawHub
Back to skill

Security audit

WIPO 小分子药物专利周报

Security checks across malware telemetry and agentic risk

Overview

This skill has a legitimate patent-reporting purpose, but it depends on unreviewed local scripts, scheduled execution, and Google Drive uploads through an existing rclone profile.

Review or supply the referenced wipo_search.py and wipo_generate_report.py scripts before installing, verify that the rclone gdrive remote points to a dedicated low-privilege Google Drive destination, and only enable the weekly cron job if automatic uploads are intended and easy to disable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger phrases include broad natural-language terms such as “专利周报”, “WIPO专利”, and “专利检索”, which can overlap with ordinary user requests and cause the skill to activate unexpectedly. Because this skill performs automation and external upload, overbroad triggering increases the chance of unintended execution and unanticipated data processing.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill explicitly uploads generated reports to Google Drive, but the description does not clearly warn users that content will be sent to an external third-party storage service. This creates a data egress risk because users may invoke the skill without understanding that generated data or derived results will leave the local environment.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.