ClawHub
Back to skill

Security audit

Geoskill: Image Composite

Security checks across malware telemetry and agentic risk

Overview

The skill mostly matches local GeoTIFF compositing, but its executable includes an under-documented network-enabled place/download workflow despite local-only claims.

Install only if you are comfortable with the local compositing commands and with reviewing the script before using from-place. Treat place names and requested areas in from-place as potentially sent to external geocoding/download services, use a virtual environment, and consider pinning dependencies before installation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Intent-Code Divergence

High
Confidence
98% confidence
Finding
The module-level privacy notice claims all processing is local and that no data is transmitted, but the from-place workflow resolves places via network-capable services and invokes downloader skills to fetch remote imagery. This mismatch can mislead users into running a networked workflow with sensitive place names or locations under false assumptions about data egress, creating a real transparency and privacy risk in a security-sensitive tool context.

Unpinned Dependencies

Low
Category
Supply Chain
Content
numpy>=1.21.0
rasterio>=1.3.0
tqdm>=4.64.0
Confidence
95% confidence
Finding
numpy>=1.21.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
numpy>=1.21.0
rasterio>=1.3.0
tqdm>=4.64.0
Confidence
95% confidence
Finding
rasterio>=1.3.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
numpy>=1.21.0
rasterio>=1.3.0
tqdm>=4.64.0
Confidence
95% confidence
Finding
tqdm>=4.64.0

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.