ClawHub

CatFee Dokobot

Security checks across malware telemetry and agentic risk

Overview

This skill is a legitimate browser-reading helper, but it can use a real Chrome session for logged-in pages without enough scoping or warning.

Install only if you intend to let an agent read pages through Chrome. Use a dedicated browser profile with only the accounts needed for the task, avoid banking, admin, email, or other sensitive sites unless explicitly intended, and disable the extension or bridge when not in use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The manifest description includes broad trigger phrases like 'read the webpage', 'fetch this page', and 'scrape this site', which can cause the skill to activate in many ordinary browsing contexts. Because this skill uses a real Chrome session and can access JS-rendered or logged-in content, accidental invocation could expose session-backed data or cause unintended browsing actions.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill instructs use of a real Chrome browser with an active extension and local bridge, but it does not warn that this may access logged-in pages, cookies, and session-scoped content visible in the user's browser. In this context, omission of that warning is security-relevant because users or orchestrators may treat it like a normal fetch tool when it actually operates with browser-session privileges.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal