ClawHub
Back to skill

Security audit

FRED-Navigator

Security checks across malware telemetry and agentic risk

Overview

This FRED lookup skill is mostly coherent, but its helper script disables HTTPS certificate verification while using a FRED API key.

Review before installing. The skill needs a FRED API key and makes network calls to FRED; remove the SSL context override before use, install dependencies in an isolated environment, and pin dependency versions if you need reproducible or higher-assurance operation.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
69% confidence
Finding
The description omits behaviors beyond simple navigation, including local file generation and, per the analyzer, modification of global SSL context behavior. Undisclosed SSL-context changes are especially concerning because they can weaken TLS verification for all subsequent network calls in the process, enabling man-in-the-middle risk and making the skill's real behavior harder to audit.

Unpinned Dependencies

Low
Category
Supply Chain
Content
# Dependencies for FRED Scout Skill
fredapi
pandas
Confidence
96% confidence
Finding
The dependency 'fredapi' is unpinned, so installs may pull different versions over time, including breaking or newly vulnerable releases. This creates a supply-chain and reproducibility risk, even though the file itself does not prove a currently exploitable flaw.

Unpinned Dependencies

Low
Category
Supply Chain
Content
# Dependencies for FRED Scout Skill
fredapi
pandas
Confidence
98% confidence
Finding
The dependency 'pandas' is unpinned, which allows installation of arbitrary newer or older versions depending on resolver state and environment. In this case the risk is heightened because pandas has had security advisories, so leaving it unpinned increases the chance of pulling an unsafe version.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.