ClawHub
Back to skill

Security audit

Threads 视频下载器

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple Threads video downloader instruction set with disclosed file-saving behavior and no bundled code or hidden persistence.

Install only if you want an agent to fetch Threads video links and save MP4 files locally. Choose a clear target directory, watch for possible filename collisions, and make sure downloads comply with Threads rules and the rights of the content owner.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly describes automatically downloading content, renaming files, and saving them to a target directory, but it does not mention any user confirmation, path restrictions, overwrite protections, or warning about local file-system changes. In an agent context, silent file writes can lead to unintended persistence, overwriting user files, or abuse of disk access beyond what the user expected.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The natural-language instructions and usage details are presented only in Chinese, which can impose a language constraint on users without opt-in. The policy allows locale constraints only when users are given a choice or when the restriction is clearly documented and justified, which is not present here.

Content

No source excerpt is available for this finding.