ClawHub
Back to skill

Security audit

库存查询

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a simple local inventory and restock lookup that reads a named spreadsheet and prints matching results, with setup and command-quoting caveats.

Before installing, confirm you trust the local inventory.xlsx file and understand it may expose matching inventory/restock details to whoever asks the agent. Ensure openpyxl is installed and the model text is passed safely as one argument to the fixed script command.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
84% confidence
Finding
The trigger condition is broad enough that the skill may activate on loosely related inventory questions without strong disambiguation or confirmation. In this skill, activation leads directly to execution of a local command using user-provided model text, so mistaken activation increases the chance of unintended command invocation or disclosure of inventory-related data.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal