ClawHub
Back to skill

Security audit

video-thumbnail

Security checks for vulnerabilities and agentic risk

Overview

This video-thumbnail skill is a simple markdown-only guide, but its referenced script is missing and its API key/service details are under-documented.

Before installing or using it, confirm where scripts/video_thumbnail.py comes from and review that code separately. Only set THUMBNAIL_API_KEY if you know the service it belongs to and avoid committing or logging that key.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.