ClawHub
Back to skill

Security audit

innovation-research

Security checks across malware telemetry and agentic risk

Overview

This paid research skill stores your question locally for payment verification, but I found no hidden transmission, destructive behavior, or unrelated access.

Before installing, treat the consultation question as locally retained payment/order data. Avoid putting trade secrets, unpublished patent details, personal data, or sensitive company information in the question unless you are comfortable with it remaining in the local OpenClaw orders folder until you delete it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Tp4

High
Category
MCP Tool Poisoning
Confidence
88% confidence
Finding
The skill claims it does not collect or transmit sensitive user materials, but it does store the user's question locally in an order file along with payment-related metadata and encrypted payment payloads. Even if data is only stored locally and not remotely transmitted by this skill, the description is materially incomplete and may mislead users into disclosing confidential business, patent, or strategy information under the assumption it is not retained. In the context of an innovation-research skill, user questions are especially likely to contain proprietary or commercially sensitive content, which increases the privacy risk.

Session Persistence

Medium
Category
Rogue Agent
Content
if __name__ == "__main__":
    parser = argparse.ArgumentParser(
        description="Create innovation-research order for clawtip payment"
    )
    parser.add_argument("question", help="User question / consultation content")
    args = parser.parse_args()
Confidence
91% confidence
Finding
The script persists user-supplied question content to a predictable file under the user's home directory, creating durable local storage of potentially sensitive consultation data. In this skill context, user questions may contain proprietary business, patent, or strategy information, so local persistence increases confidentiality risk if the host is shared, backed up, or later inspected by other software.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.