ClawHub
Back to skill

Security audit

Windows Screenshot

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward local Windows screenshot tool, with privacy-sensitive behavior that matches its stated purpose and is mostly disclosed.

Install only if you are comfortable with an agent-accessible tool that can capture the visible Windows screen and save it locally. Review the screen before running it, set OPENCLAW_MEDIA_DIR if you want a specific storage location, and delete screenshots that may contain private information.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The README instructs users to run the skill but does not clearly disclose that it captures the current screen and saves the resulting image to disk. This is dangerous because screenshots can contain sensitive information such as credentials, private messages, financial data, or internal documents, and users may execute the tool without informed consent about the privacy impact.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script captures the user's screen and writes the image to disk without any user-facing consent, warning, or runtime confirmation. In an agent skill context, silent screenshot capture can expose sensitive information such as credentials, personal data, internal documents, or active application content, making this materially more dangerous than an ordinary utility script.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The script reads user environment data and creates a persistent directory under the user's profile without explicit disclosure. While less severe than the screenshot itself, this behavior increases privacy and persistence risk by silently storing captured content in a predictable location that may be overlooked by the user.

Static analysis

No suspicious patterns detected.