ClawHub
Back to skill

Security audit

Meme Maker

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent meme generator with local rendering by default and an explicitly selected Imgflip mode that carries normal third-party privacy considerations.

Use local rendering for private or internal meme text. If you choose Imgflip mode, expect the template selection, meme text, and Imgflip credentials to be sent to Imgflip, and avoid passing passwords on a shared command line or in shell history.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill explicitly promotes an Imgflip-hosted mode that sends user-provided meme text to a third-party service, but it does not clearly warn users that their prompts/content may leave the local environment. This creates a privacy and data-handling risk because users may assume the skill is fully local/private based on the surrounding messaging, and could unintentionally disclose sensitive or internal information to Imgflip.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The imgflip rendering path sends user-provided meme text and account credentials to a third-party service over the network. While this behavior is part of the advertised feature set, it is still a real data-transmission risk because sensitive text or credentials may be exposed to an external provider without a strong in-tool warning, confirmation step, or minimization controls.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/meme.mjs:145