ClawHub
Back to skill

Security audit

Image Vision

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent local image-description bridge; the main caution is its README includes a copy-paste Ollama installer command that pipes a remote script into the shell.

Install only if you are comfortable running a local Ollama-based image analyzer. Prefer installing Ollama from an official installer or package manager you trust, or inspect any downloaded install script before running it. Be aware that images analyzed by the skill are read from disk and sent to local Ollama, and the optional clipboard helper can save clipboard screenshots locally if you run it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

External Script Fetching

High
Category
Supply Chain
Content
```bash
# 1. Install Ollama (skip if already installed)
#    macOS/Linux: curl -fsSL https://ollama.com/install.sh | sh
#    Windows:     https://ollama.com/download

# 2. Pull the vision model (~3.4 GB)
Confidence
96% confidence
Finding
curl -fsSL https://ollama.com/install.sh | sh

External Script Fetching

High
Category
Supply Chain
Content
```bash
# 1. 安装 Ollama（如已装则跳过）
#    macOS/Linux: curl -fsSL https://ollama.com/install.sh | sh
#    Windows:     https://ollama.com/download

# 2. 拉取视觉模型（约 3.4 GB）
Confidence
96% confidence
Finding
curl -fsSL https://ollama.com/install.sh | sh

Chaining Abuse

High
Category
Tool Misuse
Content
```bash
# 1. Install Ollama (skip if already installed)
#    macOS/Linux: curl -fsSL https://ollama.com/install.sh | sh
#    Windows:     https://ollama.com/download

# 2. Pull the vision model (~3.4 GB)
Confidence
98% confidence
Finding
| sh

Chaining Abuse

High
Category
Tool Misuse
Content
```bash
# 1. 安装 Ollama（如已装则跳过）
#    macOS/Linux: curl -fsSL https://ollama.com/install.sh | sh
#    Windows:     https://ollama.com/download

# 2. 拉取视觉模型（约 3.4 GB）
Confidence
98% confidence
Finding
| sh

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal