ClawHub
Back to skill

Security audit

Open Elevation

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it claims: query public elevation data for user-provided coordinates, with no hidden persistence or credential use found.

Install only if you are comfortable sending latitude and longitude coordinates to the public Open-Elevation API. For stricter environments, pin or update the dependency versions before use and avoid sending sensitive location datasets to a public service.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill documentation clearly describes capabilities to read input CSV files, write output files, and send coordinates to a public network API, yet no declared permissions are present. This creates a transparency and governance gap: users or platforms may authorize the skill under false assumptions, leading to unintended file access or external data transmission.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
tqdm>=4.64.0
Confidence
94% confidence
Finding
requests>=2.28.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
tqdm>=4.64.0
Confidence
94% confidence
Finding
tqdm>=4.64.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High
Category
Supply Chain
Confidence
97% confidence
Finding
requests==2.28.0

Known Vulnerable Dependency: tqdm==4.64.0 — 2 advisory(ies): CVE-2024-34062 (tqdm CLI arguments injection attack); CVE-2024-34062 (tqdm CLI arguments injection attack)

Low
Category
Supply Chain
Confidence
88% confidence
Finding
tqdm==4.64.0

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
tests/test_open-elevation.py:16