ClawHub
Back to skill

Security audit

Luckyball

Security checks across malware telemetry and agentic risk

Overview

This skill is a lottery-number prediction helper with disclosed but privacy-relevant history tracking and web lookup behavior.

Install only if you are comfortable with the agent keeping a local history of lottery predictions and using web search to check past results. Consider asking the agent to confirm before reading or writing memory files, and change the hardcoded local paths if they do not match your environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
91% confidence
Finding
The skill’s declared purpose is lottery-number generation from a date input, but it also documents reading local memory files, performing web searches, and maintaining historical bookkeeping. This expands the skill’s privileges beyond user expectations and creates unnecessary access to local data and external resources, which can expose private information or cause unintended side effects.

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The skill instructs updating a user-specific memory file and MEMORY.md index even though those actions are not required to produce a lottery recommendation. Unnecessary write capability increases risk of tampering with user state, polluting unrelated memory, or creating persistent records without clear authorization.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The markdown explicitly describes reading and writing a user-specific memory file but does not warn the user about local data access, retention, or privacy implications. Even if the stored content is only predictions, access to user-scoped memory paths can reveal sensitive context and normalizes hidden persistence.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The skill directs the agent to use WebSearch to retrieve lottery results without notifying the user that external network access will occur. Undisclosed outbound queries can leak user activity patterns or prompt-derived details and violate expectations for an otherwise local date-based utility.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.