ClawHub
Back to skill

Security audit

SVG Artist

Security checks across malware telemetry and agentic risk

Overview

This SVG helper is purpose-aligned, but its local rendering script can run shell commands with an output path taken from command-line input.

Review before installing. Use only fixed, simple output filenames under a temporary directory, and do not let user prompts or untrusted text choose paths. The safer fix is to replace shell-string execSync calls with execFile or spawn using argument arrays, validate output paths, and keep rendering in a constrained temporary directory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Missing User Warnings

Low
Confidence
81% confidence
Finding
The skill instructs the agent to create files in /tmp and execute local conversion commands without surfacing that behavior to the user. While this is common for rendering workflows, undisclosed local file creation and subprocess execution can expand the attack surface, especially if later implementations interpolate untrusted prompt content into shell commands or process unsafe SVG content with vulnerable converters.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/generate_svg.js:138