ClawHub
Back to plugin

Security audit

qrcode-barcode-scanner

Security checks for vulnerabilities and agentic risk

Overview

The reviewed bundle coherently supports local QR and barcode scanning, with separately downloaded components requiring their own review.

Review the separately installed adapter and native engine before enabling MCP tools; their code was unavailable in this bundle, and external verification attempts were unsuccessful. Supply only intended images, keep decoded links and commands as text, and use a process timeout when a hard execution limit matters.

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Incomplete referenced artifact analysis

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · skills/qrcode-barcode-scanner/SKILL.md (reported line 12)May include surrounding context.

md
Use the original helper at `scripts/scan.mjs` relative to this skill's directory

Credential Access

High
Category
Privilege Escalation
Confidence
60% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · skills/qrcode-barcode-scanner/scripts/test.mjs (reported line 23)May include surrounding context.

js
const checks = [];
const run = (image, args = [], engine = runtime, env = {}) => spawnSync(process.execPath,
  [helper, "--engine-root", engine, "--budget-ms", "0", ...args, "--", image],
  { cwd: scratch, env: { ...process.env, ...env }, encoding: "utf8", timeout: 30_000, maxBuffer: 8 * 1024 * 1024 });
const parse = (result, status) => {
  assert.equal(result.error, undefined);
  assert.equal(result.status, status, result.stderr);

Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env.

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

Endor dependency reachability

Checked Nov 8, 2026 · 10:10 PM UTC

Not analyzed: Endor report-only scanning is not enabled for this plugin.