ClawHub
Back to skill

Security audit

V2.4.0

Security checks across malware telemetry and agentic risk

Overview

The skill appears purpose-built for local invoice extraction, but its OCR fallback can expose sensitive invoice or ticket images through predictable temporary files.

Install only if you are comfortable processing invoices and train tickets locally with these temporary-file risks. Prefer using it on a trusted single-user machine, avoid shared hosts, and look for an update that uses secure tempfile APIs or in-memory OCR before handling highly sensitive documents.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The OCR fallback renders PDF pages containing invoice data to predictable temporary image files under /tmp, which can expose sensitive financial and tax information to other local users or processes if filesystem permissions, crashes, or cleanup failures leave artifacts behind. In a multi-user or shared-host environment, this increases confidentiality risk because intermediate data is written outside the primary workflow without secure temporary-file handling.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
This second OCR path repeats the same pattern of exporting sensitive PDF content to /tmp using a constructed filename, creating a risk of information leakage through residual files, race conditions around predictable names, or incomplete cleanup when errors occur. Because the processed documents are invoices/train tickets with personal and tax identifiers, the skill context makes intermediate-file exposure more sensitive than ordinary temporary data.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The code renders a PDF page to an image and writes it to a predictable path in /tmp using only the process ID. OCR input may contain sensitive invoice or identity data, so persisting it to a world-accessible temporary location can expose private contents to other local users or enable symlink/race issues before deletion.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.