PicSee URL Shortener & QR Codes (Web)

• Outcome: Pass
• Latest audit: May 28, 2026 at 12:49 PM UTC
• Version:
  1.0.0

Overview

This skill does what it says: it shortens URLs with PicSee and only installs local QR-code dependencies if the user asks for a QR code.

Install only if you are comfortable sending URLs to PicSee. If you are logged into PicSee in the OpenClaw browser profile, shortened links may be associated with that account. Only request QR-code generation if you accept creating a local Python virtual environment and installing the qrcode and pillow packages.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

• Confidence: 90% confidence
• Finding: The skill instructs the agent to create a virtual environment, install packages, and execute shell/Python code locally just to generate a QR code. That expands the skill from simple web interaction into arbitrary local code execution and dependency installation, which increases attack surface and can be abused or normalized in contexts where such execution is not necessary.

VirusTotal

65/65 vendors flagged this skill as clean.