ClawHub
Back to skill

Security audit

Agent Skills Collector

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a normal tool for collecting public skill listings into an Excel file, with some privacy disclosure and dependency hygiene issues to review.

Before installing, understand that the script performs live network searches and may send public skill description snippets to MyMemory for translation. Prefer pinning dependencies to known patched versions, and avoid using it with private or proprietary catalog data unless the translation behavior is changed or disabled.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The code sends up to 500 characters of skill description text to api.mymemory.translated.net without explicit user notice, consent, or any data classification checks. If descriptions contain proprietary, sensitive, or regulated content from external sources, this creates an unintended third-party data disclosure and a privacy/compliance risk.

Unpinned Dependencies

Low
Category
Supply Chain
Content
openpyxl
requests
Confidence
96% confidence
Finding
The dependency is unpinned, so installs may resolve to different versions over time, including vulnerable or incompatible releases. In a skill that fetches remote data and exports results, this weakens supply-chain integrity and makes builds non-reproducible.

Unpinned Dependencies

Low
Category
Supply Chain
Content
openpyxl
requests
Confidence
97% confidence
Finding
The requests dependency is also unpinned, allowing environment-dependent resolution to arbitrary newer or older versions, including versions with published security issues. Because this skill likely performs live network access to SkillHub, dependency drift in the HTTP client increases operational and security risk.

Static analysis

No suspicious patterns detected.