ClawHub
Back to skill

Security audit

Simple news feed reader (RSS)

Security checks across malware telemetry and agentic risk

Overview

The news reader code is straightforward, but the package includes unrelated local permission settings that could let an agent run broad Python commands and stage or commit repository changes.

Review or remove .claude/settings.local.json before installing. The news script itself fetches public RSS feeds without credentials, but a news skill should not need pre-approved git add or git commit access.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill explicitly performs outbound HTTP requests to multiple RSS providers, yet it declares no permissions beyond requiring python3. Undeclared network capability weakens the trust boundary for users and host systems because the skill can access external resources without transparent permission signaling or policy enforcement.

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The skill requests Bash execution permissions that exceed what is needed to fetch public RSS headlines. Allowing arbitrary Python execution plus git add/commit enables filesystem modification and local code execution, which expands the attack surface well beyond a read-only news retrieval skill.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.