ClawHub
Back to skill

Security audit

wb-buddy-checkin

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Windows-only automation script for WorkBuddy check-in, with local desktop clicking and screenshot files that match its stated purpose.

Install only if you want a Windows desktop automation that can foreground WorkBuddy, move/click the mouse, and save local calibration and screenshot files. Calibrate it before running, and use scheduled execution only when you are comfortable with unattended clicks in your desktop session.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill documents and instructs execution of a local Python script that can invoke shell execution, read environment-dependent state, and write files (for example `calibrate.json` and `checkin_result.png`), yet no permissions are declared. That creates a transparency and policy gap: an agent or reviewer may treat the skill as lower risk than it really is, while it actually automates desktop actions and persists files on disk.

Context-Inappropriate Capability

Medium
Confidence
86% confidence
Finding
The script claims to be a pure ctypes/Windows API automation tool, but it will execute an external PowerShell script from a user-writable skills directory if present. That creates an unexpected code-execution trust boundary: a modified or replaced desktop-control-win script would run with the current user's privileges whenever screenshot capture occurs.

Vague Triggers

Medium
Confidence
83% confidence
Finding
The trigger phrase `自动签到` is broad enough to match unrelated requests for automatic check-in behavior outside WorkBuddy. That can cause accidental invocation of a desktop-clicking automation skill in the wrong context, which is risky because this skill foregrounds windows, performs clicks, and writes output artifacts.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.