ClawHub
Back to skill

Security audit

AIOS Chart Image

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims: it renders user-provided chart data into image files with sender-scoped workspace isolation.

Install only if you want agents to render chart images from sender-provided data. Prefer PNG/JPEG/WebP for untrusted inputs, keep npm dependencies current, and verify the senderId/workspace arguments before generating files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The default prompt is phrased broadly enough to trigger chart rendering on loosely matched inputs like current sender JSON, Markdown tables, or ECharts options, without explicit user confirmation or tighter preconditions. In an agent setting, this can cause unintended skill invocation, increasing the chance that untrusted content is automatically processed and written to disk under generated, which expands the attack surface and can enable prompt-routing abuse or unsafe handling of adversarial input.

Known Vulnerable Dependency: echarts==6.0.0 — 1 advisory(ies): CVE-2026-45249 (Apache ECharts has a cross-site scripting (XSS) vulnerability)

Low
Category
Supply Chain
Confidence
83% confidence
Finding
echarts==6.0.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.