ClawHub
Back to skill

Security audit

海康云眸视频录像管理

Security checks across malware telemetry and agentic risk

Overview

The skill appears purpose-built for Hik-Cloud video recording, but it gives an agent credential-backed power to alter or delete cloud resources without strong confirmation or credential-handling guardrails.

Install only if you trust the publisher and need an agent to manage Hik-Cloud recording resources. Use least-privileged Hik-Cloud credentials, avoid custom base URLs unless you control them, protect or clear the token cache on shared machines, prefer environment variables over CLI tokens, and require explicit human confirmation before deleting projects/files, stopping tasks, changing flow limits, or initiating uploads/downloads.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill declares capabilities to read environment variables, read/write files, and access the network, but does not explicitly declare permissions or surface those capabilities to users. In this skill's context, those capabilities are security-relevant because they are used for credential handling, token caching, and outbound API calls, so the lack of explicit permission declaration reduces transparency and weakens policy enforcement.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The skill exposes destructive and state-changing operations such as project deletion, task termination, file deletion, file download, upload, and flow updates without explicit risk prompts or confirmation guidance. In an agent setting, this increases the chance of unintended destructive actions or data movement occurring based on ambiguous user requests.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The script writes bearer tokens to a predictable cache file under the user's home directory without setting restrictive file permissions, encryption, or warning the operator. If another local user, process, backup system, or malware can read that file, the token can be reused to access the Hik-Cloud API with the victim's privileges until expiration.

Credential Access

High
Category
Privilege Escalation
Content
通用参数：

- `--base-url`：显式指定接口域名，优先级高于环境变量
- `--access-token`：显式指定 access token
- `--timeout`：请求超时秒数，默认 `20`
- `--token-cache-file`：token 缓存文件，默认 `~/.cache/hik_open/token.json`
- `--format`：`text` 或 `json`
Confidence
88% confidence
Finding
access token

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
tests/test_hik_open_video_recording.py:16