ClawHub
Back to skill

Security audit

find-footage

Security checks for vulnerabilities and agentic risk

Overview

The skill’s media searches fit its stated purpose, with privacy considerations and an unpinned software dependency.

Choose which media folders to index and prefer a verified, preinstalled or version-pinned Reelary CLI. Search results and requested previews can reach your AI provider despite local processing, as the [publisher explains](https://reelary.app/agents). Review the separately linked setup skill before allowing installation or indexing.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

MCP server referenced without pinned version: 'npx -y reelary'.

Medium
Category
MCP Rug Pull
Confidence
97% confidence
Finding

The fallback command runs an unversioned npm package through npx -y, allowing a newly published or compromised release to execute without an installation confirmation. Although this is a CLI invocation rather than an MCP server launch, the supply-chain risk is real: the package runs with the agent's user privileges and could access or exfiltrate private media and other accessible files, contrary to the skill's local-only expectation.

Content

No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx -y reelary'.

Medium
Category
MCP Rug Pull
Confidence
97% confidence
Finding

The npx -y reelary open fallback has the same unpinned dependency-execution risk, even though its intended purpose is only to open the People view. If npm must obtain the package, a compromised release could execute with the user's privileges; access to a private media library containing faces and location information increases the potential confidentiality impact.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.