Back to skill

Security audit

ssq-analyzer

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed lottery analysis and payment-gated recommendation tool, with local storage and payment-environment access that fit its stated purpose.

Install only if you are comfortable with the skill fetching public lottery data, writing a local database/report, and saving paid-order metadata under your OpenClaw orders directory. Do not include personal or sensitive details in the question text, and remove old order/report files if you do not want them retained locally.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (5)

Intent-Code Divergence

High
Confidence
98% confidence
Finding
The docstring states that no personal information is stored, but the code persists the user-supplied question field into the local order file. Free-form question text can contain personal or sensitive data, so this creates a misleading privacy claim and a local data-retention risk if the filesystem is accessed by other users, backups, or malware.

Unvalidated Output Injection

High
Category
Output Handling
Content
def run_free_analysis() -> str:
    """Run data fetch + free analysis. Always available."""
    print("[STEP 1/3] Fetching latest SSQ data from cwl.gov.cn...")
    result = subprocess.run(
        [sys.executable, FETCH_SCRIPT],
        capture_output=True, text=True, timeout=120
    )
Confidence
74% confidence
Finding
subprocess.run( [sys.executable, FETCH_SCRIPT], capture_output

Unvalidated Output Injection

High
Category
Output Handling
Content
raise RuntimeError("Data fetch failed")

    print("\n[STEP 2/3] Generating free analysis report...")
    result = subprocess.run(
        [sys.executable, ANALYZE_SCRIPT],
        capture_output=True, text=True, timeout=120
    )
Confidence
73% confidence
Finding
subprocess.run( [sys.executable, ANALYZE_SCRIPT], capture_output

Unvalidated Output Injection

High
Category
Output Handling
Content
def run_paid_recommendation() -> str:
    """Run recommendation generation (only after payment verification)."""
    print("\n[STEP 3/3] Generating paid recommendation numbers...")
    result = subprocess.run(
        [sys.executable, RECOMMEND_SCRIPT],
        capture_output=True, text=True, timeout=120
    )
Confidence
71% confidence
Finding
subprocess.run( [sys.executable, RECOMMEND_SCRIPT], capture_output

Session Persistence

Medium
Category
Rogue Agent
Content
if __name__ == "__main__":
    parser = argparse.ArgumentParser(description="Create SSQ analyzer order")
    parser.add_argument("question", help="User question / consultation content")
    args = parser.parse_args()
Confidence
80% confidence
Finding
Create SSQ analyzer order") parser.add_argument("question", help="User question / consultation content") args = parser.parse_args() indicator = compute_indicator(SLUG) print("=" * 60

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.