ClawHub
Back to skill

Security audit

GPM Precipitation Downloader

Security checks across malware telemetry and agentic risk

Overview

The skill is a plausible NASA precipitation downloader, but users could be misled about regional filtering and credential-free network behavior.

Review before installing if you need strict regional subsetting or strict control over local proxy/netrc credential use. Treat bbox as informational only unless the skill is changed, and run it in a clean environment if you do not want Requests to pick up ambient network settings during downloads.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
The CLI accepts a bounding box and prints it in search output, which implies geographic filtering, but the bbox is never applied to either discovery or download logic. This can mislead users or downstream agents into believing results are spatially constrained when the tool actually fetches full global files, causing incorrect analysis, over-collection, and unnecessary bandwidth/storage use.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
Confidence
96% confidence
Finding
requests>=2.28.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
tests/conftest.py:18