ClawHub
Back to skill

Security audit

illustrations-local-storage

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says: it converts Markdown image links into local image files, with ordinary file and network access that is disclosed and purpose-aligned.

Install only in an environment where running pip is acceptable. Use --allowed-host when processing untrusted Markdown or when image downloads should be limited to known storage domains, and use --force only when you intend to replace existing output files.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill explicitly instructs the user to run Python, install Pillow, read Markdown from disk, write rewritten Markdown and image files, and download remote HTTP(S) images, yet it declares no permissions. This is dangerous because users or policy systems may approve or execute the skill without understanding that it performs filesystem access and outbound network activity, which can enable unintended data exposure, SSRF-like access to internal endpoints, or unsafe overwrites if the script is misused.

Static analysis

No suspicious patterns detected.