ClawHub
Back to skill

Security audit

Netstatus

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward network-status helper, with one disclosed external public-IP lookup users should understand before use.

Before installing, understand that running the public IP/location check contacts ipinfo.io, so that service will see your public IP and request metadata. The skill otherwise appears limited to user-visible network and system status checks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly uses `curl` to query `https://ipinfo.io/json` for public IP geolocation, which sends the user's public IP and request metadata to a third-party service, but the skill description and usage guidance do not clearly warn the user about this external disclosure. In a network-status skill, users may expect local inspection only, so the omission creates a privacy risk and reduces informed consent.

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

No suspicious patterns detected.