ClawHub

海康云眸设备基础管理

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Hik-Cloud device-management skill, but it can delete or reboot devices and caches API tokens locally, so it should be used carefully.

Install only if you want an agent to manage Hik-Cloud devices with your credentials. Use least-privileged Hik credentials where possible, keep the base URL pointed at a trusted Hik endpoint, verify device serial numbers before delete or reboot actions, and protect or clear the local token cache on shared machines.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill clearly requires sensitive capabilities—environment access for credentials, filesystem read/write for token caching, and network access to a cloud API—but does not declare permissions explicitly. This weakens least-privilege controls and user/operator awareness, making it easier for a high-impact device-management skill to run with broader access than expected.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill supports destructive operations such as device deletion, but the documentation does not require a confirmation step before performing deletion. In a device-management context, accidental or socially engineered deletion can disrupt service and remove managed devices from the platform.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The script writes bearer tokens to a predictable file in the user's home directory without enforcing restrictive file permissions or using OS-provided secret storage. If another local user, process, backup system, or malware can read that file, the token can be reused to manage devices through the Hik-Cloud API.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal