ClawHub
Back to skill

Security audit

reCameraV2

Security checks across malware telemetry and agentic risk

Overview

This documentation-only camera API skill is purpose-aligned, but it gives agents powerful network-scanning and device-control workflows without enough user-confirmation or data-handling guardrails.

Review carefully before installing. Use it only for reCamera devices and networks you own or are authorized to manage. Before scans, resets, firmware changes, storage formatting, file deletion, terminal access, log capture, or cloud model conversion, require a clear user confirmation and avoid exposing passwords, cookies, tokens, logs, or proprietary model files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
79% confidence
Finding
The documentation shows multiple features handling sensitive credentials and telemetry insecurely or ambiguously, including plain FTP credentials, Wi-Fi passwords, RTSP/ONVIF credentials in JSON, and HTTP/MQTT notification targets with tokens. In the context of an embedded device API reference, normalizing these patterns without transport-security guidance increases the chance integrators will deploy secrets over plaintext channels or log them unsafely, leading to credential disclosure and device compromise.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill includes a mandatory workflow to enumerate active IPs across a subnet and probe each host, which is network reconnaissance behavior. Even though framed as device discovery, it lacks any guardrails around authorization, scope limitation, or requiring explicit user confirmation before scanning, so an agent could perform intrusive enumeration in environments where the user is not authorized.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill exposes terminal and system log WebSocket endpoints, which can reveal secrets, credentials, environment details, and operational data if accessed casually by an agent. Because the skill presents these capabilities as normal API functions without warning, it may encourage collection or display of highly sensitive data beyond what is necessary for the task.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill documents destructive operations including config import, reboot, factory reset, formatting, firmware upgrade, and file removal without any explicit confirmation or safety barriers. In an agent setting, this creates a real risk of irreversible data loss, service interruption, or device bricking if the operations are triggered accidentally, misunderstood, or maliciously prompted.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.