ClawHub
Back to skill

Security audit

Dxf Text Extractor

Security checks across malware telemetry and agentic risk

Overview

The skill appears to extract DXF text as advertised, but it tells the agent to silently install an unpinned Python dependency before running.

Review before installing. The extraction behavior is coherent, but require explicit approval before any `pip install`, preferably preinstall or pin `ezdxf`, and only run it on DXF files you intend to process. Treat the generated Markdown as confidential if the CAD drawing contains private project information.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
Instructing the agent to silently run `pip install ezdxf` introduces unreviewed code into the environment at runtime, creating a supply-chain and environment-modification risk unrelated to safe prompt-only behavior. Even if `ezdxf` is legitimate, automatic installation can pull network content, alter dependencies, and violate the principle of least privilege without user awareness.

Context-Inappropriate Capability

Medium
Confidence
89% confidence
Finding
The skill instructs the agent to execute a local Python script on a user-provided absolute file path, which expands the skill from text handling into code execution. If the script is modified, unsafe, or invoked on attacker-controlled paths, it could read unintended files, write outputs, or exploit parser weaknesses in DXF processing.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The instruction to 'silently' install a dependency removes informed consent and hides a material environment change from the user or operator. Concealed package installation is especially risky because it can mask network access, supply-chain exposure, and persistent changes to the runtime that outlast the current task.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.