ClawHub
Back to skill

Security audit

Baoyu Comic

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed comic-generation workflow, with some preference persistence and image-backend execution that users should understand before use.

Before installing, review the first-time preference setup and choose project-local preferences if you do not want settings reused across projects. Avoid putting secrets or sensitive text in watermark or preference fields. If using the ohmsha preset, be aware it defaults to Doraemon characters; use custom characters if you want original or rights-safe output. Also understand that image generation may invoke installed backends or the Codex CLI using your existing local login.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The preset hard-codes Doraemon franchise characters as the default output, which can cause the agent to generate copyrighted branded characters without explicit user request or licensing checks. In a generic educational-comic skill, this creates avoidable IP/compliance risk and may also steer outputs toward disallowed copyrighted-character generation by default rather than as an intentional user choice.

Natural-Language Policy Violations

Medium
Confidence
89% confidence
Finding
The preset forces a specific character set and cultural/language framing by default, even when the user only asked for an educational comic. This can override user intent, reduce neutrality, and increase the chance of unexpected policy or rights issues because the agent injects copyrighted and culturally specific content without opt-in.

Session Persistence

Medium
Category
Rogue Agent
Content
│
        ▼
┌─────────────────────┐
│ Create EXTEND.md    │
└─────────────────────┘
        │
        ▼
Confidence
85% confidence
Finding
Create EXTEND.md │ └─────────────────────┘ │ ▼ Continue to Step 1 ``` ## Questions **Language**: Use user's input language or preferred language for all questions. Do not alwa

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.