ClawHub
Back to skill

Security audit

Pet Vaccine Record Wallet

Security checks across malware telemetry and agentic risk

Overview

This prompt-only skill is not malware, but it needs review because some examples contradict its promise not to give veterinary or travel-compliance advice.

Review this skill carefully before installing. Use it only as a record organizer, do not rely on it to decide whether a pet needs revaccination, whether antibody testing is sufficient, or whether travel documents meet border rules. Redact unnecessary owner and pet identifiers from uploaded records, and confirm medical or import questions with a licensed veterinarian or the relevant authority.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
94% confidence
Finding
The README gives concrete veterinary/medical guidance about revaccination and antibody testing despite claiming the skill does not provide veterinary advice. This can mislead users into relying on non-professional health guidance for an animal's care, creating safety and liability risk if the advice is inaccurate, incomplete, or inappropriate for local regulations and the pet's condition.

Intent-Code Divergence

High
Confidence
98% confidence
Finding
The Chinese usage scenario’s expected output instructs on whether revaccination is needed, suggests antibody testing, gives timing/price guidance, and describes replacement steps. That contradicts the skill’s stated boundary of being an administrative proof organizer only, and could cause users to rely on unqualified medical or treatment-adjacent guidance for an animal health decision.

Intent-Code Divergence

Medium
Confidence
93% confidence
Finding
Scenario 3 says the skill will determine what is overdue and cross-reference records against Canadian import requirements, which moves beyond record organization into compliance-style and medical-schedule interpretation. Users may treat this as authoritative travel clearance or vaccination sufficiency even though the skill elsewhere says it must not infer legal compliance or create schedules from incomplete records.

Natural-Language Policy Violations

Medium
Confidence
94% confidence
Finding
The acceptance test explicitly requires English-first output with no CJK text, which hard-codes a language restriction unrelated to security or record integrity. In practice, this can exclude or degrade service for users who provide records or need responses in Chinese, Japanese, or Korean, and may pressure the agent to ignore user language preferences or transliterate/omit important details from source documents.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.