ClawHub
Back to skill

Security audit

Clip2MD

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward clip2md helper that saves user-provided URLs through the clip2md API and stores a user-provided token locally, with the main risks disclosed but worth understanding.

Install this only if you intend to use clip2md and are comfortable storing its token in a local JSON file. Treat the token like a password, avoid using it on shared machines, and invoke the skill only for clip2md clipping or quota checks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
86% confidence
Finding
The skill explicitly instructs the user to configure a token and states that it calls a fixed external API, which confirms network-capable behavior. However, the manifest does not declare corresponding permissions, reducing transparency and preventing proper consent/review of outbound data flow and credential use.

Vague Triggers

Medium
Confidence
74% confidence
Finding
The trigger list includes broad terms such as 'clip' and generic references to clipping/saving links, which can cause the skill to activate in contexts unrelated to this specific service. Overbroad activation can lead to unintended network requests or prompting for token-based actions when the user did not intend to use this integration.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The script persists a bearer token in a predictable file under the user's home directory without warning the user, setting restrictive file permissions, or using an OS-backed secret store. If the host is multi-user, backed up insecurely, or compromised by other local processes, the token can be recovered and used to access the user's clip2md account and quota.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.