ClawHub
Back to skill

Security audit

vue-table-操作及导出

Security checks across malware telemetry and agentic risk

Overview

This skill automates a specific Vue admin demo, including editing table rows and saving an Excel file, and those actions are disclosed.

Install only if you want an agent to log into the specified Vue admin demo, edit table importance values, and create a dated Excel file on the Desktop. If using this pattern on a real admin system, choose the output path yourself, check for existing files, use scoped credentials, and require explicit confirmation before saving any edits.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill writes an Excel file directly to a hard-coded Desktop path without warning the user, asking consent, or checking for existing files. This can cause unintended local file creation or overwriting and may expose extracted application data in a predictable, user-visible location.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs the agent to edit table records and save the changes, but does not clearly warn that it will alter application data. Even though the referenced site looks like a demo admin system, the pattern is dangerous because the same automation could be reused against real administrative interfaces and cause unauthorized or accidental data modification.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.