ClawHub
Back to skill

Security audit

guaikei-kuaishou-user-profile-fetcher

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Kuaishou public-data research tool that uses a third-party API token and saves fetched results locally, with no evidence of hidden execution, exfiltration beyond the stated API service, or system persistence.

Before installing, confirm you are comfortable sending Kuaishou keywords, profile or video identifiers, and query parameters to guaikei.com using your GUAIKEI_API_TOKEN. Use it only for public Kuaishou data, and delete or protect the generated logs if the searched topics, URLs, comments, or returned account/video metadata are sensitive.

A.I.G

By Tencent
Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The README states that all task results are automatically saved under `logs/`, but it does not clearly warn users that fetched public content, target profile/video URLs, search keywords, and possibly tokens or operational metadata may be written to disk. In a data-collection tool, silent persistence increases the risk of accidental retention, local disclosure, or inappropriate sharing of collected data, especially on shared systems or when logs are later exported.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The script persists the full request and returned search results to a local JSON file, and the filename itself embeds the user keyword and query parameters. In this skill’s context, those results may include sensitive research targets, account/video metadata, or operator intent, creating a confidentiality risk on shared hosts, CI runners, or multi-user environments even though this is not remote code execution.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:15