ClawHub
Back to skill

Security audit

Study Buddy

Security checks across malware telemetry and agentic risk

Overview

This is a local study-planning tool that stores learning records on the user's machine and does not show evidence of network exfiltration or deceptive behavior.

Install only if you are comfortable keeping child-related study data in local JSON files under ~/.study-buddy or a directory you set with STUDY_BUDDY_HOME. On shared computers, use an isolated/private directory and manually delete the data directory when you no longer need the records.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
Findings (14)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The documentation explicitly describes collecting and storing a child's study profile, schedule, and parent notes in local files, but provides no privacy notice, retention guidance, or warning that sensitive minor-related data will be persisted. Because the skill is aimed at parents of primary/secondary school students, the data concerns are heightened: even local storage of children's names, study weaknesses, goals, and parent remarks can expose sensitive personal information if the host device is shared or compromised.

Missing User Warnings

Low
Confidence
82% confidence
Finding
The documentation lists multiple persistent data locations for logs, wrong-question notebooks, plans, and reports, but does not clearly warn users that learner data will be copied across several local files over time. This increases the chance of unintended disclosure, especially on family/shared computers, because users may assume the tool is transient when it actually creates a growing local record of a child's performance and habits.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
shell=True,
            capture_output=True,
            text=True,
            env=os.environ.copy(),
            timeout=5
        )
        return result.returncode == 0, result.stdout, result.stderr
Confidence
60% confidence
Finding
os.environ.copy()

Unvalidated Output Injection

High
Category
Output Handling
Content
def run(cmd):
    result = subprocess.run(cmd, cwd=ROOT, text=True, capture_output=True)
    if result.returncode != 0:
        print(result.stdout)
        print(result.stderr, file=sys.stderr)
Confidence
95% confidence
Finding
subprocess.run(cmd, cwd=ROOT, text=True, capture_output

Unvalidated Output Injection

High
Category
Output Handling
Content
def run_command(cmd):
    """运行命令并返回结果"""
    try:
        result = subprocess.run(
            cmd,
            shell=True,
            capture_output=True,
Confidence
95% confidence
Finding
subprocess.run( cmd, shell=True, capture_output

Hidden Instructions

High
Category
Prompt Injection
Content
## 🎯 目标用户

### 核心用户
- 👨‍👩‍👧 初高中学生家长

### 适用场景
- 📚 制定学期/假期学习计划
Confidence
60% confidence
Finding
‍

Hidden Instructions

High
Category
Prompt Injection
Content
## 🎯 目标用户

### 核心用户
- 👨‍👩‍👧 初高中学生家长

### 适用场景
- 📚 制定学期/假期学习计划
Confidence
60% confidence
Finding
‍

Hidden Instructions

High
Category
Prompt Injection
Content
4. **📊 进度跟踪** - 统计学习天数、连续打卡、本周/本月学习情况
5. **📈 学习报告** - 周期性生成学习报告，评估学习阶段，给出家长建议
6. **📝 错题本** - 按学科分类记录错题，支持复习追踪和掌握标记
7. **👨‍👩‍👧 家长视角** - 专为家长设计，方便监督、查看、反馈孩子学习情况

## 🔒 安全说明
Confidence
60% confidence
Finding
‍

Hidden Instructions

High
Category
Prompt Injection
Content
4. **📊 进度跟踪** - 统计学习天数、连续打卡、本周/本月学习情况
5. **📈 学习报告** - 周期性生成学习报告，评估学习阶段，给出家长建议
6. **📝 错题本** - 按学科分类记录错题，支持复习追踪和掌握标记
7. **👨‍👩‍👧 家长视角** - 专为家长设计，方便监督、查看、反馈孩子学习情况

## 🔒 安全说明
Confidence
60% confidence
Finding
‍

Hidden Instructions

High
Category
Prompt Injection
Content
**核心用户**：初高中学生家长（初中、高中）

**使用场景**：
- 👨‍👩‍👧 家长为孩子制定学期/假期学习计划
- 📚 每日学习打卡和时长记录
- 📊 定期查看孩子学习进度和习惯养成情况
- 📝 整理各学科错题，追踪掌握程度
Confidence
60% confidence
Finding
‍

Hidden Instructions

High
Category
Prompt Injection
Content
**核心用户**：初高中学生家长（初中、高中）

**使用场景**：
- 👨‍👩‍👧 家长为孩子制定学期/假期学习计划
- 📚 每日学习打卡和时长记录
- 📊 定期查看孩子学习进度和习惯养成情况
- 📝 整理各学科错题，追踪掌握程度
Confidence
60% confidence
Finding
‍

Tool Parameter Abuse

High
Category
Tool Misuse
Content
def run_command(cmd):
    """运行命令并返回结果"""
    try:
        result = subprocess.run(
            cmd,
            shell=True,
            capture_output=True,
Confidence
90% confidence
Finding
subprocess.run( cmd, shell=True

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Content
---
name: study-buddy
description: 初高中学生家长的学习陪伴助手，帮助家长为孩子制定学习计划、追踪学习进度、管理错题本、生成学习报告。适用于家长辅导孩子学习、监督学习进度、记录学习成果。触发词包括"帮我制定学习计划"、"孩子学习打卡"、"查看学习进度"、"记录错题"、"生成学习报告"。
version: 1.2.0
author: jianghaidong
runtime:
Confidence
80% confidence
Finding
description:; ‍; ‍; ‍; ‍

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Content
if __name__ == '__main__':
    main()
Confidence
80% confidence
Finding
description=; ‍; ‍; ‍; ‍

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.