ClawHub
Back to skill

Security audit

Enterprise File Writer

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed local file-writing helper, but users should treat it as powerful because it can overwrite local files when directed.

Install only if you want an agent to write or overwrite local files. Review target paths carefully, avoid using --force unless you explicitly intend to write a sensitive path, and be aware that GBK/GB2312/Latin-1 encoding options are documented but not actually honored by the current code.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
94% confidence
Finding
The skill advertises controlled, enterprise-safe file writing for a declared set of formats, but the dispatch logic falls back to generic text writing for any unrecognized extension. That means a caller can write arbitrary files at arbitrary paths, defeating the claimed restrictions and increasing the chance of misuse for persistence, configuration tampering, or overwriting sensitive files.

Description-Behavior Mismatch

Medium
Confidence
98% confidence
Finding
The public interface accepts an encoding parameter and the manifest promises UTF-8/GBK handling, but text writes always encode with UTF-8 and ignore the caller-supplied encoding. This can corrupt data, break downstream parsers, or produce misleading results in enterprise workflows that rely on correct locale-specific encodings.

Credential Access

High
Category
Privilege Escalation
Content
|------|--------|----------|
| **文本类** | .txt, .md, .markdown, .rst, .log, .csv, .tsv | UTF-8 文本写入 |
| **代码类** | .java, .py, .js, .ts, .jsx, .tsx, .c, .cpp, .h, .cs, .go, .rs, .rb, .php, .vue | UTF-8 文本写入 |
| **配置类** | .json, .xml, .yaml, .yml, .toml, .ini, .cfg, .properties, .gradle, .config, .env | UTF-8 文本写入 |
| **样式类** | .html, .htm, .css, .scss, .sass, .less | UTF-8 文本写入 |
| **脚本类** | .sh, .bash, .bat, .cmd, .ps1, .sql | UTF-8 文本写入 |
| **Office** | .docx (Word), .xlsx (Excel) | OpenXML ZIP 格式写入 |
Confidence
87% confidence
Finding
.env

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.