ClawHub
Back to skill

Security audit

partial-redrawing

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Flyelep image inpainting helper that sends user-provided images and prompts to an external API, with the main caveat that uploaded local images become persistent public URLs.

Install only if you are comfortable giving Flyelep an API key at runtime and sending the relevant images and edit prompts to Flyelep. Avoid using it for sensitive private images unless you accept that local uploads are converted into permanent public URLs according to the skill text.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The activation condition is broad enough that the skill may trigger for many generic image-edit requests, causing the agent to collect API secrets and send user-supplied image URLs to an external third-party service when a simpler or local capability might have been more appropriate. In a skill that performs network calls and handles user images plus credentials, overbroad routing increases the chance of unnecessary data exposure and unintended external processing.

Natural-Language Policy Violations

Medium
Confidence
80% confidence
Finding
The documentation is written to force Chinese-language interaction without obtaining user preference, which can cause the agent to transform or relay prompts in an unintended language. In this context, that is primarily a safety and consent issue: it may degrade user understanding of what is being sent to the external API and increase the risk of mistaken edits or misunderstood handling of sensitive content.

Static analysis

No suspicious patterns detected.