ClawHub
Back to skill

Security audit

QRdex

Security checks across malware telemetry and agentic risk

Overview

QRdex is a straightforward QRdex.io API helper with disclosed credential use and account-level QR management actions, but no evidence of hidden or malicious behavior.

Install only if you want an agent to use your QRdex.io account. Use a revocable API key where possible, confirm QR IDs before update or delete actions, and avoid tracked QR codes or QR payloads containing sensitive WiFi, contact, message, or business data unless that remote storage and tracking are acceptable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
97% confidence
Finding
The skill clearly requires environment access for `QRDEX_API_KEY` and network access to call the QRdex API, but it does not declare those permissions. Undeclared capabilities reduce transparency and can bypass user expectations or policy enforcement around credential use and outbound requests, especially in an API-integrating skill.

Missing User Warnings

Low
Confidence
90% confidence
Finding
The skill exposes update and delete operations against remote QR code resources without any warning, confirmation guidance, or mention that these actions modify persistent state. In an agent setting, this can lead to accidental destructive changes or deletions if invoked from ambiguous user prompts or automation flows.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The documentation states scan tracking is enabled by default but provides no privacy disclosure or warning that scans may be logged and analyzed. Because QR scans can reveal behavioral and potentially location-linked usage data, silent default tracking increases privacy and compliance risk for users and downstream subjects.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The delete command issues an irreversible remote deletion immediately, with no confirmation prompt, dry-run mode, or protective flag. In an agent or automation context, a mistaken invocation, prompt injection, or parameter mix-up could permanently remove QR resources with no recovery path.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.