ClawHub
Back to skill

Security audit

android-sms-gateway-local

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says: it helps a user operate an Android SMS Gateway over a user-supplied local server, with sensitive but disclosed SMS, credential, webhook, and inbox-export behavior.

Install only if you intend to let the agent send SMS and manage SMS webhooks through your Android device. Use a trusted/private network for the Local Server, prefer loopback/VPN/TLS protection where possible, use HTTPS webhook receivers, limit inbox export windows, and rotate the gateway password if it may have crossed an untrusted network.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill instructs use of a Local Server over plain HTTP with Basic Auth, which exposes SMS contents and reusable credentials to interception by anyone on the same local network segment or with visibility into the path. Because the skill handles sensitive message data and authentication secrets, failing to warn users or steer them toward a protected transport meaningfully increases the chance of credential theft and message disclosure.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The documentation explicitly describes exporting historical inbox messages by replaying them to a configured webhook URL, but it does not warn that this can transmit past SMS content, which may include sensitive personal data, to a remote endpoint. In this skill context, that omission is security-relevant because the feature enables bulk exfiltration of received SMS data, and users may underestimate the privacy and data-handling risks.

External Transmission

Medium
Category
Data Exfiltration
Content
if [[ -n "$SIM_NUMBER" ]]; then body+=",\"simNumber\":$SIM_NUMBER"; fi
body+="}"

curl -sS -u "$USER:$PASS" -H "Content-Type: application/json" -d "$body" "$BASE_URL/messages"
Confidence
84% confidence
Finding
curl -sS -u "$USER:$PASS" -H "Content-Type: application/json" -d

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.