ClawHub
Back to skill

Security audit

guaikei-kuaishou-video-comment-fetcher

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Kuaishou public-data research tool that uses a third-party API and saves fetched results locally, with no evidence of hidden or destructive behavior.

Install only if you are comfortable sending Kuaishou search targets and URLs to guaikei.com with your API token, and remember that fetched results are saved locally in logs until you delete them.

A.I.G

By Tencent
Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The README states that all task results are automatically saved to the logs/ directory, but it does not warn users that collected comment data, URLs, keywords, and analysis outputs may persist on disk. In a scraping and competitor-monitoring tool, this creates a real risk of unintended retention, local exposure, or later redistribution of potentially sensitive business intelligence or user-generated content.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The CLI writes a local JSON file containing the requested URL and full fetched comment results, which may include sensitive research targets, user-generated content, or operational data. In this skill context, the tool is intended for competitor and brand-content research, so silent persistence of collected data increases privacy and data-handling risk, especially on shared machines or CI/agent environments.

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The CLI persists fetched results to a local JSON file automatically after execution, which can expose scraped data to other local users, backup systems, or later unintended processing without the user's explicit awareness. In this skill context, the data may include competitive intelligence or comment data, so silent local retention increases privacy and data-handling risk even though it is not overtly malicious.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The script sends the user-supplied profile URL and query parameters to external API functions to create and retrieve tasks, but this file does not clearly warn the user that their input is being transmitted off-host. Because the skill is specifically designed for competitor research against a third-party platform, undisclosed outbound sharing of targets and parameters can expose sensitive research intent or operational data.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The CLI persists full search output to a local JSON file named with user-controlled search parameters, but the user-facing flow does not clearly disclose that results will be stored on disk. In this skill context, returned data may include competitive research targets, creator information, or comments, so silent persistence can expose sensitive business activity or collected third-party data to other local users, backups, or later compromise of the host.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:15