ClawHub
Back to skill

Security audit

Gemini Tavily Search

Security checks across malware telemetry and agentic risk

Overview

This is a coherent web-search helper that uses Gemini and may fall back to Tavily, with no evidence of hidden persistence, local data harvesting, destructive actions, or unrelated credential use.

Install only if you are comfortable sending search queries to Gemini/Google and possibly Tavily using your own API keys. Use dedicated, revocable keys with quotas, avoid secrets or sensitive personal data in queries, and treat returned web snippets as untrusted source material.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The README explicitly describes sending user queries to Gemini and, on failure, to Tavily, but it does not warn that prompts and related search parameters may be transmitted to third-party services. In an agent context, users may provide sensitive or regulated data without realizing it leaves the local environment, creating privacy, compliance, and data-governance risk.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill sends user queries to external providers (Gemini and potentially Tavily) and can automatically fail over to a second provider, but the user-facing description does not disclose that data may leave the system or be shared with multiple third parties. This creates a real privacy and data-governance risk, especially if users provide sensitive, regulated, or proprietary information assuming the request stays local or with a single provider.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
2. If web search is NOT required → answer directly via Gemini without tools.
3. If web search IS required → call Gemini with `google_search` tool enabled.
4. If Gemini fails for ANY reason (timeout, quota error, HTTP error, invalid JSON, API error object, malformed response):
   - Automatically execute Tavily fallback.
5. Normalize provider output into unified JSON schema.
6. Always return valid structured JSON.
Confidence
87% confidence
Finding
Automatically execute

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.