ClawHub
Back to skill

Security audit

Qwen Vision

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward cloud vision helper that sends user-chosen images to Alibaba Cloud for analysis, so privacy caution is needed but the behavior matches its stated purpose.

Install only if you are comfortable sending the images and prompts you choose to Alibaba Cloud DashScope. Avoid using it on IDs, private screenshots, confidential documents, regulated data, or proprietary images unless you are authorized to share them with that provider, and protect the API key because it may allow billable usage.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill clearly relies on outbound network access to send image data to Alibaba Cloud's Qwen Vision API, but the manifest does not explicitly declare that capability. Undeclared network use weakens sandboxing, reviewability, and informed consent because users and platforms cannot easily tell that local files may be transmitted off-device.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The README instructs users to submit images and video frames to Alibaba Cloud DashScope/Qwen Vision, but it does not clearly warn that uploaded content is sent to a third-party remote API for processing. This can lead users to unknowingly transmit sensitive images, documents, screenshots, or video frames containing personal or confidential information, creating privacy, compliance, and data-handling risk.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The documentation notes that images are base64-encoded and sent via API, but it does not present this as a prominent user warning about third-party data transfer. Users may unknowingly upload sensitive screenshots, documents, IDs, or personal photos to a cloud provider, creating privacy, compliance, and data-handling risk.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script base64-encodes the supplied image and sends it to Alibaba Cloud DashScope over the network, but the CLI provides no explicit disclosure or confirmation that local image contents will leave the host. This is a real privacy and data-handling risk because users may pass sensitive screenshots, IDs, medical images, or proprietary material without realizing they are being transmitted to a third-party service.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.