ClawHub
Back to skill

Security audit

Synology Surveillance

Security checks across malware telemetry and agentic risk

Overview

This skill appears purpose-built for Synology camera control, but it needs review because it gives an agent sensitive surveillance access with weak credential and transport-safety guidance.

Review before installing. Use a dedicated least-privilege Synology account, avoid admin credentials, do not store the password in TOOLS.md or committed files, require HTTPS with a trusted certificate, restrict NAS/API access to trusted networks, and require explicit user approval before snapshots, live streams, PTZ movement, or recording changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The documentation instructs users to place Synology host, username, and password directly into TOOLS.md, encouraging insecure secret storage without guidance on access control, redaction, or use of a secret manager. If TOOLS.md is committed, shared, or exposed to other tools and agents, NAS credentials could be leaked and used to access surveillance cameras and recordings.

Missing User Warnings

High
Confidence
99% confidence
Finding
The example API calls use HTTP and include username and password in the URL query string, which exposes credentials in plaintext over the network and can also leak them via shell history, logs, proxies, and monitoring systems. Because the skill controls surveillance infrastructure, compromise of these credentials could grant access to camera feeds, snapshots, event logs, and recording controls.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The documentation explicitly instructs operators to disable 2FA for the API user, which weakens account security and lowers resistance to credential theft or reuse attacks. In the context of a surveillance skill, compromise of that account could expose camera feeds, snapshots, event history, and PTZ/recording controls, making the recommendation materially risky even if framed as an operational requirement.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script sends the username and password in the query string to auth.cgi, which exposes credentials to URL logging surfaces such as shell history, process listings, proxy logs, reverse proxies, and server access logs. This is made more dangerous because the script defaults to plain HTTP on port 5000 and constructs the base URL in a way that can enable HTTPS unexpectedly or inconsistently, so credentials may also traverse the network without transport protection.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.