ClawHub
Back to skill

Security audit

lokaler-companion

Security checks across malware telemetry and agentic risk

Overview

This skill is a local monitoring-app template whose network access, local files, starter scripts, PWA, and optional browser extension are disclosed and fit its purpose.

Before installing, confirm you are comfortable with a local script starting a Python server, polling the sources you configure, and saving logs/state locally. Only grant browser-extension host permissions for the exact sites you want monitored, and avoid using it for private or access-controlled resources unless you have explicit permission.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill describes and encourages capabilities including local file read/write, network access, and shell execution, but it does not declare permissions explicitly. That creates a security transparency gap: a user or orchestrator may invoke the skill without understanding that it can start local servers, write logs/PID files, run helper scripts, or make outbound requests. In this context the capabilities are functionally relevant rather than overtly malicious, but the lack of declaration increases the chance of unsafe deployment or over-trusting the skill.

Context-Inappropriate Capability

Medium
Confidence
88% confidence
Finding
The guidance explicitly recommends launching PowerShell with `-ExecutionPolicy Bypass`, which weakens a Windows safety control intended to prevent accidental execution of unsigned or restricted scripts. Even though the bypass is scoped to a single invocation and is presented as a usability workaround, it normalizes security-control circumvention in a skill whose primary purpose is local monitoring, not privileged administration.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The guidance describes a browser extension that periodically polls endpoints, stores prior state in local storage, and triggers notifications, but it omits explicit privacy disclosures and user-consent guidance. In this skill context, that matters because browser extensions with host permissions and background execution can monitor resources continuously, which may surprise users or lead to collection of sensitive usage patterns if deployed without clear notice and scope limits.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.