ClawHub
Back to skill

Security audit

Topic Monitor

Security checks across malware telemetry and agentic risk

Overview

This is a coherent topic-monitoring skill that performs the web/feed checks and local alert queueing it describes, with some configuration cautions but no evidence of hidden or malicious behavior.

Install if you want recurring topic monitoring and are comfortable with configured search queries, feed URLs, and alert contents being used for external checks or notifications. Review config.json before enabling cron, keep TOPIC_MONITOR_DATA_DIR in a private location, and only set WEB_SEARCH_PLUS_PATH to a trusted web-search-plus script.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tainted flow: 'web_search_plus' from os.environ.get (line 275, credential/environment) → subprocess.run (code execution)

Medium
Category
Data Flow
Content
safe_query = re.sub(r'[\x00-\x1f\x7f]', '', query)[:500]
            if verbose:
                print(f"   🔍 Searching via web-search-plus: {safe_query}")
            result = subprocess.run(
                ["python3", str(web_search_plus), "--query", safe_query, "--max-results", "5"],
                capture_output=True,
                text=True,
Confidence
95% confidence
Finding
result = subprocess.run( ["python3", str(web_search_plus), "--query", safe_query, "--max-results", "5"], capture_output=True, text=True,

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill advertises and instructs use of capabilities including network access, shell execution, environment-variable access, and local file reads/writes, but does not declare permissions explicitly. That creates a transparency and policy-enforcement gap: users or hosting systems may not realize the skill can continuously poll external sources, persist monitor state, and send outbound alerts, increasing the chance of unintended data exposure or misuse.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill description omits a clear warning that it performs continuous external monitoring and may send outbound alerts to Telegram. In this context, that lack of disclosure is risky because users may enable topic monitoring without understanding that queries, feed requests, and alert contents can leave the local environment on a recurring basis.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.