ClawHub
Back to skill

Security audit

Philips Hue Thinking Indicator

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Philips Hue light-control helper, with practical privacy cautions around local device credentials and verifying the missing hue command before use.

Before installing, verify the actual hue executable because it is referenced but not present in the reviewed bundle. Use this only with a Hue Bridge/light you intend the assistant to control, keep ~/.config/philips-hue/config.json private with restrictive permissions, and avoid adding untrusted directories to PATH.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill clearly instructs users to install and invoke a shell command (`hue`) and to modify PATH, but the metadata does not declare corresponding permissions or capabilities. This creates a transparency and trust problem: users and platforms may underestimate that the skill performs local command execution and interacts with local networked devices.

Missing User Warnings

Low
Confidence
91% confidence
Finding
The README explains that the tool talks to a local Hue Bridge and stores a bridge IP and username/API key in a config file, but it does not prominently warn users that this creates local-network control capability and leaves credentials on disk. If the config file permissions are weak or the host is shared, another local process or user could reuse those credentials to control the lighting environment.

Missing User Warnings

Low
Confidence
95% confidence
Finding
The documentation describes storing a bridge IP and API username in a local config file and communicating with the Hue Bridge over local HTTP, but it does not prominently warn users about these privacy and security implications. While this is not remote code execution, it can expose sensitive local-network details and reusable device credentials to other local processes or users if stored insecurely.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.