Security audit

Batch Video Creator Skill

Security checks for vulnerabilities and agentic risk

Overview

This is a simple text-only video workflow skill with no bundled executable code, but its install instructions should be treated with normal package-install caution.

Before installing, prefer a pinned or trusted ClawHub CLI source if available, and run the install from a normal non-admin account. The skill itself is text-only, but its promised video workflow may still involve processing user-provided media through whatever tools or services the user's agent chooses to use.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: README.md:5
Finding: Unpinned Package Execution Through npx
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 95% confidence
Finding: The README instructs users to execute npx clawhub install batch-video-creator without pinning a specific version, which allows whatever version of the clawhub package is current at execution time to run on the user's machine. Because npx fetches and executes remote package code, a compromised, typosquatted, or maliciously updated package could lead to arbitrary code execution during installation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The manifest description includes Chinese text alongside English, but the file does not explain whether the skill may respond in Chinese or how language selection works. Under the policy, forcing or implying a language/locale without user opt-in can be a natural-language policy issue.
Content: No source excerpt is available for this finding.