ClawHub
Back to skill

Security audit

Vestaboard

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Vestaboard control CLI; it can change a real board, but that behavior matches its stated purpose.

Install this only if you want an agent to read and update your Vestaboard. Keep credentials in environment variables, leave the API base pointed at a trusted Vestaboard endpoint, preview sensitive messages before writing, and use write-layout only with known 6x22 layout JSON files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The write command takes arbitrary CLI-provided text and immediately sends it to the Vestaboard Cloud API, causing a real-world state change on a remote device without any confirmation, dry-run default, or visibility warning. In an agent setting, this increases the risk of prompt-influenced or accidental actions that display unintended, deceptive, or sensitive content on a physical sign.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The write-layout command reads an arbitrary local file, parses it, and posts its full contents to a remote API with no warning or confirmation. In an agent context, this creates a data-exfiltration path: a user or upstream prompt could cause sensitive local files containing JSON-like content to be transmitted off-host to the Vestaboard service.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"lint": "node -c scripts/vb.js"
  },
  "dependencies": {
    "undici": "^7.3.0"
  }
}
Confidence
95% confidence
Finding
"undici": "^7.3.0"

Known Vulnerable Dependency: undici==7.3.0 — 10 advisory(ies): CVE-2026-1525 (Undici has an HTTP Request/Response Smuggling issue); CVE-2026-6733 (undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse); CVE-2026-1527 (Undici has CRLF Injection in undici via `upgrade` option) +7 more

High
Category
Supply Chain
Confidence
98% confidence
Finding
undici==7.3.0

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.