ClawHub
Back to skill

Security audit

MyBooks

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed MyBooks client for managing a personal book library, with expected but sensitive features for credentials, book uploads, delivery, and TTS conversion.

Install only if you trust your MyBooks server and any TTS provider you configure. Keep TLS verification enabled for non-local hosts, avoid putting MyBooks credentials in shared/global env files, and treat book text, ebook files, API keys, and voice samples as sensitive data before using upload, delivery, or TTS tools.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
This client allows TLS certificate verification to be disabled through MYBOOKS_SSL_VERIFY while performing authenticated requests, including login and subsequent cookie-bearing API calls. In a skill that handles usernames, passwords, TTS API keys, ebook uploads, and book delivery actions, this materially increases the risk of man-in-the-middle interception, credential theft, and response tampering, especially if users point it at non-local or semi-trusted hosts.

External Transmission

Medium
Category
Data Exfiltration
Content
| 参数 | 类型 | 必填 | 说明 |
|------|------|------|------|
| `api_url` | string | ✅ | API 地址，如 `https://api.xiaomimimo.com/v1/chat/completions` |
| `model_name` | string | ✅ | 模型 ID，MiMo TTS 类型固定为 `mimo-v2.5-tts` |
| `api_type` | string | ✅ | API 类型：`chat_completions`（MiMo TTS）/ `audio_speech`（OpenAI 兼容）/ `custom` |
| `api_key` | string | ✅ | API 密钥 |
Confidence
84% confidence
Finding
The skill supports sending sensitive content and credentials to an externally supplied TTS endpoint, including API keys, EPUB-derived book text, and uploaded voice samples for cloning. Even though this is part of the intended feature set, external transmission creates real confidentiality and privacy risk if the endpoint is untrusted, misconfigured, or controlled by a third party.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Python code POSTs credential environment variables to an environment-controlled URL.

Critical
Code
suspicious.env_credential_access
Location
scripts/mybooks_api.py:96