ClawHub
Back to skill

Security audit

Geoskill: WorldPop Population

Security checks across malware telemetry and agentic risk

Overview

This appears to be a normal WorldPop population-data downloader, with expected network and file-writing behavior, though users should watch disk usage and dependency hygiene.

Install in a normal isolated Python environment, prefer updated pinned versions of requests and tqdm, and choose an output directory with enough free space. Treat downloads as potentially large and be careful with output filenames because existing files may be overwritten.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Low
Confidence
74% confidence
Finding
The skill encourages downloading large GeoTIFF datasets and later notes files can be hundreds of megabytes, but the initial description does not clearly foreground local disk consumption or overwrite risk. In agent-driven environments, unclear disclosure about substantial filesystem writes can lead to unexpected resource exhaustion, quota issues, or accidental storage of large files in sensitive working directories.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
tqdm>=4.64.0
Confidence
92% confidence
Finding
requests>=2.28.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
tqdm>=4.64.0
Confidence
87% confidence
Finding
tqdm>=4.64.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High
Category
Supply Chain
Confidence
97% confidence
Finding
requests==2.28.0

Known Vulnerable Dependency: tqdm==4.64.0 — 2 advisory(ies): CVE-2024-34062 (tqdm CLI arguments injection attack); CVE-2024-34062 (tqdm CLI arguments injection attack)

Low
Category
Supply Chain
Confidence
90% confidence
Finding
tqdm==4.64.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.