ClawHub
Back to skill

Security audit

Astroph Arxiv Skill Repo

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward arXiv literature-search helper, with expected external queries and no evidence of hidden persistence, credential access, or destructive behavior.

Before installing, understand that search terms you give this skill will be sent to arXiv's public API and that the skill may create a temporary local Python parser script during use. Avoid putting private unpublished ideas, personal identifiers, or confidential project details into search queries unless you are comfortable sending them to arXiv.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Description-Behavior Mismatch

Medium
Confidence
88% confidence
Finding
The skill metadata emphasizes embedding a Python script for XML parsing, while the README documents a networked arXiv search workflow that constructs remote queries and fetches external content. This mismatch can conceal the true operational scope of the skill, making reviewers underestimate data egress, remote-fetch behavior, and any risks introduced by the embedded script or parser logic.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs the agent to create and execute a Python script that makes an external network request using user-supplied query content, but the skill metadata does not clearly disclose that user input will be transmitted to arXiv. This creates a privacy and transparency risk, especially if users provide sensitive research topics, unpublished ideas, or identifying context that is sent to a third-party service without explicit notice or consent.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.