ClawHub
Back to skill

Security audit

tcm-face-tongue

Security checks across malware telemetry and agentic risk

Overview

This is a coherent RageHealth face/tongue analysis skill, but users should understand that it sends sensitive images to an external API.

Install only if you are comfortable sending face or tongue photos, optional demographic/location details, and RageHealth API credentials to the configured RageHealth endpoint. Verify the intended base URL before use, avoid enabling face ID detection unless explicitly needed, and prefer pinned dependencies or a reviewed lockfile in sensitive environments.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill instructs use of environment-sourced credentials, file output, and outbound network access, but the metadata declares no permissions. This creates a trust and review gap: an executor may allow the skill to read secrets, write local files, and call external services without explicit user/admin approval, increasing the chance of unintended credential exposure or unreviewed data exfiltration of sensitive face/tongue images.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28
pycryptodome>=3.18
python-dotenv>=1.0  # optional: auto-load .env for local dev
Confidence
95% confidence
Finding
requests>=2.28

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28
pycryptodome>=3.18
python-dotenv>=1.0  # optional: auto-load .env for local dev
Confidence
95% confidence
Finding
pycryptodome>=3.18

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.