ClawHub
Back to skill

Security audit

Official Doc

Security checks across malware telemetry and agentic risk

Overview

This skill coherently converts Markdown into formatted Word documents, with disclosed and purpose-aligned file output and optional remote image fetching.

Before installing, be aware that Markdown containing remote images can trigger outbound network requests by default. Use download_images=False or review image URLs first when processing untrusted documents or working in sensitive network environments.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill advertises network/image-download functionality and likely reads local Markdown input, but the metadata shows no declared permissions. Undeclared file and network capabilities are a security transparency problem because users and enforcement systems cannot accurately assess or constrain what the skill may access. In this context, remote image downloading also increases exposure to SSRF-like fetches, unexpected external requests, and data handling risks if not explicitly permissioned and documented.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.