ClawHub
Back to skill

Security audit

Webtoon Character Generator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward webtoon image generator that sends user-provided prompts to a disclosed external image API, with some install and token-handling hygiene risks users should understand.

Before installing, prefer a pinned or ClawHub-managed install path when available, and treat prompts, reference IDs, and your Neta API token as data sent to the external Neta/TalesOfAI service. Avoid putting long-lived tokens directly on the command line; use short-lived or revocable tokens and rotate them if they may have been exposed in shell history or logs.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:31
Finding

Unpinned npx Installation Executes Mutable Third-Party Code

Content
View full analysis
Remediation
View remediation
add omactiengartelle/webtoon-character-generator ``` 2. Publish and verify the expected package integrity hash or signed provenance before execution. 3. Use a lockfile where the installation workflow permits it, and enable npm provenance and registry signature verification. 4. Pin the installed Skill to an immutable version, release, or commit rather than a mutable publisher/name reference. 5. Document the expected npm publisher, package version, Skill source, and checksum so users can verify them independently. 6. Prefer installing dependencies separately and reviewing them before execution rather than allowing `npx` to download and immediately run mutable code. 7. Execute installation in a least-privileged, isolated environment and never as an administrator unless strictly necessary. ]]>

T09 · Insecure Skill Coding Practices

Note
Location
webtooncharactergenerator.js:4
Finding

API Token Exposed Through Command-Line Arguments

Content
View full analysis
!a.startsWith("--")) || "webtoon manhwa style character portrait, clean crisp line art, highly expressive large eyes, vibrant saturated colors, smooth cel shading, dynamic pose, modern Korean webtoon aesthetic, white background, full body or bust"; const sizeFlag = args[args.indexOf("--size") + 1] || "portrait"; const tokenFlag = args[args.indexOf("--token") + 1] || null; const refFlag = args.includes("--ref") ? args[args.indexOf("--ref") + 1] : null; const TOKEN = tokenFlag; if (!TOKEN) { console.error("\n✗ Token required. Pass via: --token YOUR_TOKEN"); console.error(" Get yours at: https://www.neta.art/open/"); process.exit(1); } ``` `SKILL.md:13-19`: ```markdown Requires a Neta API token (free trial at ). Pass it via the `--token` flag. ```bash node
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)

Rp1

Medium
Category
MCP Rug Pull
Confidence
88% confidence
Finding

The README instructs users to run npx skills add omactiengartelle/webtoon-character-generator without pinning a specific version. This can cause users to fetch and execute whatever package version is current at install time, increasing supply-chain risk if the package is later compromised or a malicious update is published. In this context, the danger is real because the instruction directly leads to code acquisition/execution on the user's machine.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The trigger text says to use the skill when someone asks to "generate or create webtoon character generator images," which is ambiguous and not framed as a narrow, explicit invocation pattern. It does not provide concrete trigger phrases, boundaries, or negative examples, so ordinary image-generation requests could be interpreted as activating this skill unintentionally.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
89% confidence
Finding

The install instruction uses npx skills add omactiengartelle/webtoon-character-generator without pinning a specific package version. This can cause users to fetch whatever version is current at execution time, increasing supply-chain risk if the upstream package is updated maliciously, compromised, or changed incompatibly.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This code sends the user's prompt content and optional reference identifier to external API endpoints, but the only visible console messaging concerns missing tokens and errors. There is no confirmation prompt, privacy notice, or explanatory comment/docstring disclosing that user-supplied content is transmitted off-system.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · webtooncharactergenerator.js (reported line 87)May include surrounding context.

js
const makeRes = await request(
    "POST",
    "https://api.talesofai.com/v3/make_image",
    body
  );

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · webtooncharactergenerator.js (reported line 105)May include surrounding context.

js
const makeRes = await request(
    "POST",
    "https://api.talesofai.com/v3/make_image",
    body
  );

Static analysis

No suspicious patterns detected.