ClawHub
Back to skill

Security audit

Kandinsky

Security checks for vulnerabilities and agentic risk

Overview

This skill is mostly purpose-aligned, but it needs review because it documents and defaults to an unencrypted HTTP API endpoint that can receive an API key and user media.

Install only if you trust the Kandinsky API operator and can use an HTTPS or trusted private/VPN endpoint. Do not send sensitive images, audio, prompts, or API keys through the default plain-HTTP public IP unless you explicitly accept interception and retention risks.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The client uploads user-provided images and audio to a remote Kandinsky API for processing, but the code and CLI provide no explicit user-facing notice that personal media will leave the local machine. This creates a privacy and consent risk, especially for sensitive photos, voice recordings, or regulated data, because users may not understand the transmission and retention implications.

External Transmission

Medium
Category
Data Exfiltration
Content
BASE="${KANDINSKY_API_BASE:-http://87.242.117.37:5051}"

# 0) префлайт: сервис жив? (дёшево, без авторизации)
curl -s "$BASE/health"
# → {"status":"ok"}  — только после этого тратим ресурсы на генерацию

# 1) создать t2i
Confidence
97% confidence
Finding
The skill includes a default API base of plain HTTP to a non-loopback IP address and demonstrates sending a Bearer token to that host. Even though the text warns about insecure transport, the shipped example and defaults still normalize secret transmission over unencrypted HTTP, enabling interception or host impersonation on untrusted networks.

Static analysis

No suspicious patterns detected.