ClawHub
Back to skill

Security audit

Kuaishou Hot Trend

Security checks across malware telemetry and agentic risk

Overview

This skill coherently fetches public Kuaishou data through a disclosed third-party API and saves local JSON results, with no evidence of account actions or hidden behavior.

Install only if you are comfortable using the GUAIKEI third-party API and storing fetched public Kuaishou results locally. Treat saved logs as potentially sensitive business or user-generated content and delete or protect them when no longer needed.

A.I.G

By Tencent
Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The package presents itself as a read-only analytics and trend-monitoring tool, but its declared CLI entrypoints also support posting content and submitting comments. This mismatch can mislead users and reviewers about the package's actual capabilities, increasing the risk of unintended account actions, abuse of authenticated sessions, or covert automation once the tool is installed and run.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The README states that all task results are automatically saved to the logs/ directory, but it does not clearly warn users that scraped content may persist on disk. Because this tool collects competitor, comment, and KOL-related public data at scale, automatic persistence can create unintended retention, disclosure, or compliance risk if logs contain sensitive business intelligence or user-generated content.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The CLI persists fetched comment data to a local JSON file after execution without an explicit opt-in or clear warning to the user. This can expose potentially sensitive or regulated data through leftover files, especially on shared systems, CI runners, or developer machines where logs/artifacts are retained.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:15