ClawHub
Back to skill

Security audit

text-to-elegant-image

Security checks across malware telemetry and agentic risk

Overview

This skill coherently renders local text/Markdown into PNG images, with disclosed setup and rendering behavior, but users should be aware it loads Google Fonts and launches Chrome with certificate checks disabled for that browser session.

Install this only if you are comfortable with a skill that can install puppeteer-core, launch local Chrome, write local HTML/PNG output, and fetch Google Fonts for some styles. For stricter environments, pin dependencies, vendor or disable remote fonts, and remove the Chrome certificate-bypass flag once the local trust store is fixed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The documentation explicitly states that Puppeteer is launched with `--ignore-certificate-errors`, which disables TLS certificate validation for outbound HTTPS requests such as font CDN fetches. In a rendering pipeline that processes untrusted or variable content, this weakens transport security and enables man-in-the-middle tampering with remote resources, potentially altering rendered output or delivering malicious content through the browser context.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The document recommends disabling TLS certificate validation as an operational workaround and does so without a strong warning that this undermines HTTPS authenticity. Because this skill's purpose is text-to-image rendering, not security testing or controlled interception, normalizing certificate bypass is unjustified and increases risk from hostile networks, proxies, or compromised infrastructure.

Natural-Language Policy Violations

Medium
Confidence
87% confidence
Finding
The documentation explicitly requires loading an external Google Fonts stylesheet, which causes outbound network requests during rendering and may disclose metadata such as IP address, timing, user agent, or environment details to a third party without explicit user opt-in. In a headless export pipeline, mandatory remote asset fetching also creates privacy, compliance, and availability risks because rendering behavior now depends on an external CDN.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"description": "Puppeteer script runner for MD to Long Image skill",
  "main": "scripts/export_image.js",
  "dependencies": {
    "puppeteer-core": "^22.0.0"
  }
}
Confidence
94% confidence
Finding
The dependency uses a caret range (^22.0.0), which allows automatic installation of newer minor and patch releases rather than a single immutable version. While this is common practice, it weakens supply-chain reproducibility and can expose the skill to upstream compromise, regressions, or unexpected behavior changes in a browser automation package that executes complex rendering workflows.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/export_image.js:73