ClawHub
Back to skill

Security audit

Netstatus

Security checks for vulnerabilities and agentic risk

Overview

This skill is a read-only network status helper whose local checks and IP geolocation lookup fit its stated purpose, with a privacy note for the third-party lookup.

Install this if you are comfortable with a status command showing local network and Tailscale details in the chat and contacting ipinfo.io to identify public IP location. Avoid running it in contexts where exposing private interface addresses, mesh-network IPs, gateway status, or public-IP metadata would be sensitive.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly uses `curl` to query `https://ipinfo.io/json` for public IP and geolocation, but it does not warn users that invoking the skill sends network-derived metadata to a third-party service. This creates a privacy and transparency issue because users may expect a local status check, while the skill discloses externally observable network information and usage timing to an outside provider.

Static analysis

No suspicious patterns detected.