ClawHub
Back to skill

Security audit

world-boundary-download

Security checks across malware telemetry and agentic risk

Overview

The skill is mostly a normal boundary-data downloader, but it needs Review because its install dependencies and included helper code create under-disclosed supply-chain and location-privacy risks.

Review the dependency list before installing, especially the unexplained `core` package, and prefer a locked environment with vetted versions. Be aware that normal use downloads boundary data and stores a local cache; if any helper code is used for place-name geocoding, it may send location queries to third-party services and keep a separate local cache.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (13)

Intent-Code Divergence

Medium
Confidence
93% confidence
Finding
The module explicitly states that antimeridian-crossing bounding boxes must be rejected unless specially handled, but the implemented check only flags longitudes outside [-180, 180]. A valid in-range crossing box such as W=170, E=-170 is merely reported as 'W must be < E' and is not specifically recognized as an antimeridian case, which can cause downstream code to mis-handle geographic extents, compute incorrect areas, or silently reject/accept data under the wrong assumption.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The function sends user-supplied place names to third-party geocoding services (Open-Meteo and optionally Nominatim), which can disclose sensitive location intent or personal data without explicit user awareness in this component. In a skill context, place queries may contain home addresses, workplaces, or sensitive travel destinations, so silent transmission creates a real privacy and data-handling risk.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The code persists resolved queries to a cache file under the user's home directory by default, which can leave a local history of searched locations without explicit user consent. Location queries can be highly sensitive, and storing them on disk increases exposure to other local users, backup systems, or forensic recovery.

Unpinned Dependencies

Low
Category
Supply Chain
Content
core
geopandas>=0.12.0
pandas>=1.3.0
pycountry>=22.3.5
Confidence
94% confidence
Finding
core

Unpinned Dependencies

Low
Category
Supply Chain
Content
core
geopandas>=0.12.0
pandas>=1.3.0
pycountry>=22.3.5
pyogrio>=0.5.0
Confidence
92% confidence
Finding
geopandas>=0.12.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
core
geopandas>=0.12.0
pandas>=1.3.0
pycountry>=22.3.5
pyogrio>=0.5.0
requests>=2.28.0
Confidence
88% confidence
Finding
pandas>=1.3.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
core
geopandas>=0.12.0
pandas>=1.3.0
pycountry>=22.3.5
pyogrio>=0.5.0
requests>=2.28.0
shapely>=1.8.0
Confidence
88% confidence
Finding
pycountry>=22.3.5

Unpinned Dependencies

Low
Category
Supply Chain
Content
geopandas>=0.12.0
pandas>=1.3.0
pycountry>=22.3.5
pyogrio>=0.5.0
requests>=2.28.0
shapely>=1.8.0
topojson>=1.0
Confidence
88% confidence
Finding
pyogrio>=0.5.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
pandas>=1.3.0
pycountry>=22.3.5
pyogrio>=0.5.0
requests>=2.28.0
shapely>=1.8.0
topojson>=1.0
Confidence
95% confidence
Finding
requests>=2.28.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
pycountry>=22.3.5
pyogrio>=0.5.0
requests>=2.28.0
shapely>=1.8.0
topojson>=1.0
Confidence
87% confidence
Finding
shapely>=1.8.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
pyogrio>=0.5.0
requests>=2.28.0
shapely>=1.8.0
topojson>=1.0
Confidence
88% confidence
Finding
topojson>=1.0

Known Vulnerable Dependency: geopandas==0.12.0 — 2 advisory(ies): CVE-2025-69662 (geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclos); CVE-2025-69662 (SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to ob)

Critical
Category
Supply Chain
Confidence
98% confidence
Finding
geopandas==0.12.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High
Category
Supply Chain
Confidence
97% confidence
Finding
requests==2.28.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.