ClawHub
Back to skill

Security audit

ClawVision Plus

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims: it creates PDF/OG outputs and can send a user-provided summary to Telegram when explicitly requested.

Install only if you are comfortable with the Telegram sharing feature and dependency risk. Prefer using a reviewed lockfile or pinned patched dependency versions, and provide a Telegram bot token only when you intentionally want to send the generated summary to that chat or channel.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Unpinned Dependencies

Low
Category
Supply Chain
Content
playwright>=1.41.0
Pillow>=10.0.0
python-telegram-bot>=20.7
reportlab>=4.0.0
Confidence
96% confidence
Finding
The dependency is specified with a lower bound only, which allows future unreviewed major or minor releases to be installed. This creates supply-chain risk and can also introduce breaking or insecure versions unexpectedly in downstream environments.

Unpinned Dependencies

Low
Category
Supply Chain
Content
playwright>=1.41.0
Pillow>=10.0.0
python-telegram-bot>=20.7
reportlab>=4.0.0
Confidence
98% confidence
Finding
Pillow is declared with only a minimum version, and the minimum shown corresponds to a version with multiple known advisories. In this context, image and PDF processing increases the chance that untrusted media may reach the vulnerable library, making the dependency specification materially dangerous.

Unpinned Dependencies

Low
Category
Supply Chain
Content
playwright>=1.41.0
Pillow>=10.0.0
python-telegram-bot>=20.7
reportlab>=4.0.0
Confidence
94% confidence
Finding
The Telegram bot dependency is unpinned, so builds may pull in different versions over time without review. That increases supply-chain and stability risk even if no specific vulnerable version is identified in this file.

Unpinned Dependencies

Low
Category
Supply Chain
Content
playwright>=1.41.0
Pillow>=10.0.0
python-telegram-bot>=20.7
reportlab>=4.0.0
Confidence
94% confidence
Finding
The reportlab dependency is also left unpinned, allowing unreviewed upstream releases into the environment. For a plugin that generates PDFs, dependency drift can affect both security posture and output behavior.

Known Vulnerable Dependency: Pillow==10.0.0 — 10 advisory(ies): CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2024-28219 (Pillow buffer overflow vulnerability); CVE-2026-55379 (Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()`) +7 more

Critical
Category
Supply Chain
Confidence
99% confidence
Finding
The file permits Pillow 10.0.0, a version identified with multiple known advisories including severe memory corruption and potential code-execution issues. Because this skill explicitly handles images, OG images, and PDFs, it is plausible that attacker-controlled files could be processed, significantly increasing exploitability and impact.

Static analysis

No suspicious patterns detected.