ClawHub
Back to skill

Security audit

世界杯日历同步

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed calendar-sync helper that uses a local script and Feishu/Lark CLI to preview, create, or delete World Cup calendar events under user control.

Before installing, review that you are comfortable granting Feishu/Lark calendar permissions and running a Python script locally. Prefer preview commands first, use --execute only after checking the output, and install @larksuite/cli yourself if you do not want the skill to run a global npm install.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
return

    print(f"开始安装飞书 CLI：npm install -g {LARK_CLI_PACKAGE}")
    completed = subprocess.run(["npm", "install", "-g", LARK_CLI_PACKAGE], text=True)
    if completed.returncode != 0:
        print("安装失败。可以手动执行：")
        print(f"npm install -g {LARK_CLI_PACKAGE}")
Confidence
85% confidence
Finding
The script can automatically install and execute an external package globally via npm, which expands the trust boundary to the npm ecosystem and the current registry configuration. If the package, dependency chain, or npm configuration is compromised, a user running the doctor command with --install-cli could execute untrusted code on their machine.

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill instructs users to run local Python scripts and shell commands, install a CLI globally via npm, and interact with local files, but it does not declare corresponding permissions. This creates a transparency and review gap: users or platforms may not realize the skill needs shell execution and file access, increasing the chance of unintended command execution or broader local impact.

Context-Inappropriate Capability

Medium
Confidence
91% confidence
Finding
Auto-installing software is a real supply-chain risk, especially when performed from a convenience command unrelated to the core calendar-sync logic. The skill context does not require self-updating or arbitrary package installation, so this behavior increases exposure without strong necessity.

Static analysis

No suspicious patterns detected.