ClawHub
Back to skill

Security audit

UNIHIKER K10 PlatformIO

Security checks across malware telemetry and agentic risk

Overview

The skill appears purpose-aligned for K10 PlatformIO development and workshop setup, but users should only run its installer and quarantine-bypass steps with trusted prepared media.

Install this only if you trust the publisher and the workshop media. Run the bundled installers and upload commands only for K10 projects you expect to modify, avoid broad quarantine removal on unverified downloads, and consider removing or redacting generated metadata before sharing offline bundles.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill clearly instructs the agent to execute numerous shell, PowerShell, and batch commands, but no permissions are declared. That creates a trust and sandboxing gap: an orchestrator or user may treat the skill as low-privilege documentation while it actually drives code execution, file writes, installer creation, and uploads to connected devices.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The document instructs users to remove macOS Gatekeeper quarantine attributes from a downloaded installer and its extracted contents, which weakens a built-in trust and malware-screening control. In a workshop context this may be intended to reduce friction, but doing so without an explicit warning or stronger integrity-verification steps increases the chance that a tampered USB-delivered payload could execute without normal user protections.

Missing User Warnings

Low
Confidence
90% confidence
Finding
The script writes `platformio_core_dir=$CORE_DIR` into `metadata.txt`, which can disclose the preparer machine's local home directory structure or usernames when the installer is shared. While this is not code execution or privilege escalation, it is an unnecessary information disclosure that may expose environment details to students or other recipients.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.