ClawHub
Back to skill

Security audit

90s Anime Art Generator

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent image-generation skill, but users should understand that prompts and an API token are sent to Neta's external service and the documented token handling is not ideal.

Install only from a source you trust, prefer a pinned or verified release if available, and avoid putting long-lived API tokens directly in shell commands. Treat prompts and reference UUIDs as data sent to Neta/TalesOfAI, so do not include sensitive or confidential content unless you are comfortable sharing it with that service.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T09 · Insecure Skill Coding Practices

Warning
Location
90sanimeartgenerator.js:11
Finding

API Token Exposed Through Command-Line Arguments

Content
View full analysis
Remediation
View remediation

T08 · Insecure Dependencies

Warning
Location
SKILL.md:32
Finding

Unpinned Third-Party Installer and Mutable Skill Reference

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (9)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The script requires an API token via the command line and then sends it in an HTTP header to a third-party service. Command-line secrets are commonly exposed through shell history, process listings, audit logs, or CI job logs, so this creates unnecessary credential disclosure risk even though TLS is used for transport.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
70% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · 90sanimeartgenerator.js (reported line 73)May include surrounding context.

js
};
  }

  const res = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers: HEADERS,
    body: JSON.stringify(body),

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · 90sanimeartgenerator.js (reported line 73)May include surrounding context.

js
};
  }

  const res = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers: HEADERS,
    body: JSON.stringify(body),

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · 90sanimeartgenerator.js (reported line 101)May include surrounding context.

js
};
  }

  const res = await fetch('https://api.talesofai.com/v3/make_image', {
    method: 'POST',
    headers: HEADERS,
    body: JSON.stringify(body),

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding

The README instructs users to run npx skills add ... without pinning an exact package version. This can cause users to fetch and execute whatever version is currently published at install time, creating a supply-chain risk if the package is later compromised, typosquatted, or maliciously updated. In this skill context, the risk is somewhat elevated because the command is presented as a normal installation path that users may copy-paste directly.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding

The skill declares only tools: Bash and omits any explicit tool scope or permission boundary even though its documented purpose requires outbound network access to an external API. Without clear restrictions, an agent may execute shell commands with broader-than-necessary capabilities, increasing the risk of unintended network access or misuse beyond image generation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The documentation asks users to pass an API token and prompt to a command that sends data to an external image-generation service, but it does not clearly warn about that external transmission. This can lead users to disclose sensitive prompts or secrets without informed consent, especially in agent environments where prompts may contain personal or proprietary data.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
88% confidence
Finding

Using npx skills add omactiengartelle/90s-anime-art-generator without a pinned version makes installation non-reproducible and exposes users to supply-chain risk if the upstream package changes or is compromised later. An attacker controlling or compromising the referenced package/version stream could deliver malicious code to future installers.

Content

No source excerpt is available for this finding.

Vague Triggers

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

The phrase "Use when someone asks to generate or create 90s anime art generator images" does not clearly define exact trigger phrases, exclusions, or boundaries for when this skill should activate. While domain-specific, the wording is grammatically unclear and lacks negative examples, which can lead to inconsistent or unintended invocation decisions in manifest/markdown guidance.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.