ClawHub
Back to skill

Security audit

roadshow-capture-skill

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says, but it automates gated investor-roadshow access, legal-disclaimer acceptance, email submission, and full PDF capture with weak safeguards.

Install only if you are authorized to access, accept terms for, and retain copies of the specific roadshow materials. Prefer a session-only NRS_EMAIL instead of saving scripts/.env, manually verify the URL hostname before running, use a private output directory, and delete captured screenshots/PDFs when they are no longer needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill instructs the agent to persist the user's email address into `scripts/.env` for future runs without an explicit warning, consent step, retention policy, or scope limitation. Storing personal contact information locally increases privacy risk and may expose the email to other local users, backups, logs, or accidental repository inclusion.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The document explicitly instructs the user to capture every slide of a roadshow and assemble the images into a PDF, but provides no safeguards around authorization, confidentiality, redistribution, or handling of potentially non-public investor materials. In the context of investor presentations hosted behind gated flows, this materially enables bulk copying of sensitive content and increases the risk of unauthorized retention or sharing.

Missing User Warnings

Medium
Confidence
77% confidence
Finding
The script navigates to a user-supplied URL and automatically submits the provided email address into whatever page matches the expected selectors, without validating that the destination belongs to an approved DealRoadShow domain. This creates a phishing-style risk where a malicious or mistyped URL could cause the user's email to be sent to an attacker-controlled site.

Ssd 4

High
Confidence
95% confidence
Finding
The markdown provides a detailed, validated workflow for traversing email gating, popup handling, disclaimer interaction, slide iteration, and PDF assembly to obtain a complete offline copy of a gated presentation. Even if framed as automation practice, the combination of access-friction workarounds and full-content capture makes this operational guidance for mass copying controlled investor content, which can facilitate policy violations, confidentiality breaches, or misuse of restricted materials.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.