ClawHub
Back to skill

Security audit

Astroph Arxiv Skill Repo

Security checks across malware telemetry and agentic risk

Overview

This skill is a narrow arXiv literature-search helper that makes a disclosed network request to arXiv and does not install, persist, or access private data.

Before installing, users should understand that the skill will make live requests to arXiv for the topics they ask about. It appears purpose-aligned and low risk, but a future version would be safer if the Python snippet hardcoded or validated the arXiv host before fetching.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Context-Inappropriate Capability

Medium
Confidence
92% confidence
Finding
The embedded Python performs an outbound HTTP request to a URL assembled from user-controlled topic text and then fetches whatever URL is injected into the script. Even though the runbook intends arXiv queries, the implementation lacks enforcement that the destination remains the expected arXiv endpoint, which can enable unintended external requests if the URL construction step is subverted or generalized by the agent.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.