ClawHub
Back to skill

Security audit

小艺联网搜索

Security checks across malware telemetry and agentic risk

Overview

The skill does what it says by sending search queries to Huawei Cloud, but its install metadata includes an unnecessary external fs dependency and unpinned packages that deserve review before installation.

Review this skill before installing. It appears purpose-built for Huawei web search, but remove the unnecessary fs dependency, pin or update axios with a lockfile, and avoid storing the Huawei token directly in source code if your workflow might commit, share, or back up the skill directory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The description '华为云AI联网搜索API进行网页内容检索' is broad and does not clearly limit when the skill should be invoked, which can cause over-activation for general web, news, or factual queries. In an autoLoad-enabled skill, vague triggering increases the chance that external web access is used unexpectedly, expanding attack surface and potentially bypassing safer local handling.

Natural-Language Policy Violations

Medium
Confidence
84% confidence
Finding
The description is written only in Chinese, which can bias routing toward a specific language/locale without clear user opt-in or multilingual guidance. While not inherently dangerous on its own, this can lead to inappropriate activation for users in other locales and, combined with web access, may retrieve unintended region- or language-specific content.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"huawei"
  ],
  "dependencies": {
    "axios": "^1.6.0",
    "fs": "^0.0.1-security"
  }
}
Confidence
95% confidence
Finding
"axios": "^1.6.0"

Known Vulnerable Dependency: axios==1.6.0 — 10 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +7 more

High
Category
Supply Chain
Confidence
98% confidence
Finding
axios==1.6.0

Known Vulnerable Dependency: fs==0.0.1-security — 1 advisory(ies): MAL-2025-21003 (Malicious code in fs (npm))

High
Category
Supply Chain
Confidence
99% confidence
Finding
fs==0.0.1-security

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.