ClawHub
Back to skill

Security audit

software-copyright

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to generate the promised copyright documents, but its helper script can automatically install an unpinned Python package when run.

Review before installing or running. If you use this skill, install python-docx yourself from a trusted source, ideally in a virtual environment, and run the generator only where you are comfortable creating output files. Review all generated legal/application text before submission.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

os.system() or os exec-family call

High
Category
Dangerous Code Execution
Content
from docx.enum.table import WD_TABLE_ALIGNMENT
except ImportError:
    print("Error: python-docx not installed. Installing...")
    os.system("pip install python-docx")
    from docx import Document
    from docx.shared import Inches, Pt, Cm
    from docx.enum.text import WD_ALIGN_PARAGRAPH
Confidence
98% confidence
Finding
The script invokes a shell command at runtime to install a package with os.system("pip install python-docx"). Even though the command string is static, executing package installation during normal document generation expands the attack surface to shell execution and unpinned remote dependency retrieval, which can lead to supply-chain compromise or unintended code execution in the environment.

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
A document-generation utility should not execute external package installation as part of its normal control flow. In this skill context, the behavior is especially unjustified because the task is offline document creation, so reaching out to install code from package repositories introduces avoidable network, supply-chain, and environment-modification risk.

Static analysis

No suspicious patterns detected.