ClawHub
Back to skill

Security audit

Padel Americano Game Scorer

Security checks across malware telemetry and agentic risk

Overview

This is a local Padel Americano scoring tool whose file writes and optional PDF export match its stated purpose.

Install this only if you are comfortable with a local CLI creating and modifying tournament JSON files and exporting reports to paths you provide. Use trusted tournament data for PDF export, because that path may launch local Chrome/Chromium with reduced sandboxing.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
if not chrome:
        print(f"No Chrome/Chromium found. Wrote HTML instead: {html_path}")
        return
    subprocess.run([
        chrome,
        "--headless",
        "--disable-gpu",
Confidence
90% confidence
Finding
subprocess.run([ chrome, "--headless", "--disable-gpu", "--no-sandbox", f"--print-to-pdf={out}", html_path.as_uri(), ], check=True, stdout=subpr

Lp3

Medium
Category
MCP Least Privilege
Confidence
96% confidence
Finding
The skill invokes a local Python CLI and explicitly reads/writes tournament JSON and exported PDF files, but it declares no permissions in the manifest. This creates a transparency and policy-enforcement gap: an agent or reviewer may assume the skill is non-privileged while it can execute shell commands and modify local files, increasing the chance of unintended file access or writes if user-controlled paths are passed through.

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The PDF export feature invokes a headless Chrome/Chromium subprocess with sandboxing disabled. This is risky because the skill generates HTML from session data and then asks a full browser engine to process it locally; browser rendering bugs or unsafe local-file behaviors become more consequential when the sandbox is turned off.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.