ClawHub
Back to skill

Security audit

desktop-pet

Security checks across malware telemetry and agentic risk

Overview

The skill is coherent with its stated desktop-pet purpose, but it should be reviewed because it builds installable Electron apps using network-installed, unpinned dependencies.

Install only if you intend to build a desktop application, not just generate images. Review and pin the Electron dependencies, use a lockfile, update the Electron runtime, and require user confirmation before running the build script or installing npm packages.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Tp4

High
Category
MCP Tool Poisoning
Confidence
97% confidence
Finding
The skill advertises a full photo-to-desktop-pet transformation pipeline, but the described resources and behavior indicate it mainly packages assets into an Electron installer and may support outputs not disclosed in the description. This kind of capability mismatch is dangerous because users and host systems may grant trust, inputs, or permissions under false assumptions, while the skill performs build and packaging actions that can create executable artifacts.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The markdown instructs automatic OS detection, dependency installation, and installer creation without a prominent warning or explicit confirmation before performing system-modifying build actions. This is risky because it can trigger network downloads, disk writes, dependency installation, and executable generation in a way users may not expect from a photo-editing style skill.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"build:mac": "electron-builder --mac"
  },
  "devDependencies": {
    "electron": "^28.0.0",
    "electron-builder": "^24.9.1"
  },
  "build": {
Confidence
91% confidence
Finding
"electron": "^28.0.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
},
  "devDependencies": {
    "electron": "^28.0.0",
    "electron-builder": "^24.9.1"
  },
  "build": {
    "appId": "com.workbuddy.desktoppet",
Confidence
84% confidence
Finding
"electron-builder": "^24.9.1"

Known Vulnerable Dependency: electron==28.0.0 — 10 advisory(ies): CVE-2026-34776 (Electron: Out-of-bounds read in second-instance IPC on macOS and Linux); CVE-2026-34767 (Electron: HTTP Response Header Injection in custom protocol handlers and webRequ); CVE-2026-34774 (Electron: Use-after-free in offscreen child window paint callback) +7 more

High
Category
Supply Chain
Confidence
97% confidence
Finding
electron==28.0.0

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/build_installer.js:109