ClawHub
Back to skill

Security audit

unihiker-m10-python

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed UNIHIKER M10 development helper whose SSH, deployment, hardware, and dependency actions fit its stated purpose.

Install this only if you intend to let the agent connect to and modify a UNIHIKER M10 over SSH. Change the factory default password, enter current credentials interactively, review any generated program before deployment, and be careful with examples involving microphone recording, Wi-Fi QR codes, package installs, or background processes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The template includes code that records microphone audio to a local file without any surrounding warning, consent prompt, or note that a file will be created. In a hardware-control skill for the UNIHIKER M10, this is relevant because users may copy-paste examples directly onto a device with a built-in microphone, creating privacy risk and unexpected local storage of sensitive audio.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The example hardcodes a Wi-Fi QR payload that includes a plaintext password and presents it directly on the device screen. Even though it is an example, this normalizes insecure credential handling and could lead users to embed real network credentials in code or display them to nearby observers, resulting in credential exposure and unauthorized network access.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The document exposes a factory-default SSH credential pair (`root` / `dfrobot`) without an adjacent warning that these credentials are highly sensitive and should be changed immediately. In a skill specifically designed to help users connect and deploy over SSH to a networked device, publishing default root credentials increases the chance of insecure real-world deployments and unauthorized access if users leave defaults unchanged.

VirusTotal

41/41 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.