ClawHub
Back to skill

Security audit

kuaidi-query

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed parcel-tracking integration that stores local credentials/subscriptions and calls the expected KDNiao logistics API.

Before installing, expect to provide KDNiao API credentials and allow the skill to store them locally under ~/.openclaw with restricted file permissions. Shipment numbers, optional phone suffixes, and query data are sent to KDNiao for tracking. Use group privacy allowlists carefully because full logistics details can include sensitive delivery information.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill clearly performs sensitive operations including reading environment variables for API credentials, reading and writing user configuration and subscription files, invoking shell commands, and making network requests to a third-party logistics API, yet no explicit permissions are declared. This creates a trust and review gap: the runtime or a human reviewer cannot easily understand or constrain the skill’s actual capabilities, increasing the risk of unintended data exposure or overbroad execution if the skill is installed or modified.

Static analysis

No suspicious patterns detected.