ClawHub
Back to skill

Security audit

Soilgrids Download

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it says: fetch public SoilGrids data for user-supplied locations and save it locally, with dependency hygiene issues to review.

Install only if you are comfortable with the tool contacting ISRIC using the coordinates you provide and writing results to your chosen output file. In controlled environments, pin the dependencies and review the extra soilgrids_download requirement before using requirements.txt.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill documentation clearly indicates capabilities to access the network and write output files, but the metadata shown does not declare permissions or prominently disclose those capabilities. This creates a trust and review gap: users or automation may invoke the skill without realizing it can contact external services and create local artifacts, which can lead to unintended data egress or file-system side effects.

Missing User Warnings

Low
Confidence
89% confidence
Finding
The markdown instructs users to download data from an external API and save it locally, but it does not clearly warn that running the skill will initiate network access and create files on disk. While the described behavior is expected for this type of utility, missing disclosure can still cause surprise execution effects in constrained or sensitive environments.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
soilgrids_download
tqdm>=4.64.0
Confidence
95% confidence
Finding
soilgrids_download

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
soilgrids_download
tqdm>=4.64.0
Confidence
91% confidence
Finding
requests>=2.28.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
soilgrids_download
tqdm>=4.64.0
Confidence
88% confidence
Finding
tqdm>=4.64.0

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
tests/test_soilgrids-download.py:27