ClawHub
Back to skill

Security audit

蓝牙设备监控

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Mac Bluetooth utility, with the main caution that its power-off and disconnect commands can interrupt Bluetooth peripherals.

Use the read-only listing commands normally. Before running disconnect or `power off`, make sure you have another way to control the Mac, such as a built-in keyboard/trackpad or wired input device, because Bluetooth peripherals may stop working immediately.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
88% confidence
Finding
The script exposes Bluetooth power on/off control even though the stated purpose is monitoring connected devices and connect/disconnect operations. This expands the skill's authority beyond user expectations, and a caller invoking the skill for monitoring could unintentionally or deceptively disable Bluetooth globally, disrupting peripherals and related workflows.

Context-Inappropriate Capability

Medium
Confidence
91% confidence
Finding
Global Bluetooth power toggling is a sensitive host-level action unrelated to simple device monitoring. It can be abused to disconnect all Bluetooth peripherals at once, causing denial of service for keyboards, mice, headsets, or other trusted devices, which is more dangerous in an agent skill because the operation is scriptable and may be triggered under ambiguous prompts.

Missing User Warnings

Medium
Confidence
83% confidence
Finding
The skill advertises `bluetooth-monitor power off` without clearly warning that disabling Bluetooth can immediately disconnect keyboards, mice, headsets, and accessibility devices. On a Mac using Bluetooth input peripherals, this can cause loss of user control, interrupt active sessions, and create a self-inflicted denial-of-service condition.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.