ClawHub
Back to skill

Security audit

DuoPlus AI

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed DuoPlus cloud-phone automation helper that uses a user-provided API key to control selected devices, with no hidden persistence or unrelated data access found.

Install only if you intend to let the agent operate DuoPlus cloud phones. Provide the API key only for tasks you want performed, avoid untrusted API or gateway override settings, and review requested phone power, proxy, screenshot, and UI actions because they can affect billable devices or accounts visible on the cloud phone.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
97% confidence
Finding
The skill instructs the agent to use network access, accept secrets, write screenshots to disk, and read environment-variable overrides, but it does not declare permissions to make those capabilities explicit. That creates a trust and review gap: a caller may approve or invoke the skill without realizing it can transmit API keys to external services and persist potentially sensitive device screenshots locally.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
references/control-api.md:24