ClawHub
Back to skill

Security audit

Download Dem Skil

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed DEM downloading tool whose network access, optional credentials, and local file writes match its stated mapping-data purpose.

Before installing, be aware that the skill can contact external DEM providers, use OPENTOPOGRAPHY_API_KEY or EARTHDATA_TOKEN when you choose those sources, and write large output, manifest, partial-download, and cache files under the output location. Review provider terms before redistributing downloaded data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill instructs use of a Python script that performs network access, reads environment variables for credentials, and reads/writes local files, yet the skill declares no explicit permissions. This creates a transparency and consent gap: an agent or user may invoke the skill without understanding it can access tokens, contact external providers, and modify local storage.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
scripts/test_dem_download.py:21