ClawHub

tencentcloud-sms-skill

Security checks across malware telemetry and agentic risk

Overview

The skill’s SMS features are coherent, but it needs review because normal use can automatically install unpinned Python packages while handling Tencent Cloud SMS credentials and send authority.

Review before installing. Use a dedicated Python environment, preinstall or pin the required dependencies yourself if possible, and use a least-privilege Tencent Cloud CAM subaccount limited to the SMS APIs you need. Expect the skill to handle SMS credentials, phone numbers, uploaded Excel sheets, and optional proof images, and only proceed with send/signature/template actions after reviewing the dry-run preview.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
import tencentcloud  # noqa: F401  # pylint: disable=unused-import
    except ImportError:
        print("[INFO] tencentcloud-sdk-python not found. Installing...", file=sys.stderr)
        subprocess.check_call(
            [sys.executable, "-m", "pip", "install", "tencentcloud-sdk-python", "-q"],
            stdout=sys.stderr,
            stderr=sys.stderr,
Confidence
95% confidence
Finding
subprocess.check_call( [sys.executable, "-m", "pip", "install", "tencentcloud-sdk-python", "-q"], stdout=sys.stderr, stderr=sys.stderr, )

subprocess module call

Medium
Category
Dangerous Code Execution
Content
import openpyxl  # noqa: F401  # pylint: disable=unused-import
    except ImportError:
        print("[INFO] openpyxl not found. Installing...", file=sys.stderr)
        subprocess.check_call(
            [sys.executable, "-m", "pip", "install", "openpyxl", "-q"],
            stdout=sys.stderr,
            stderr=sys.stderr,
Confidence
90% confidence
Finding
subprocess.check_call( [sys.executable, "-m", "pip", "install", "openpyxl", "-q"], stdout=sys.stderr, stderr=sys.stderr, )

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
Auto-installing Python packages via pip is an environment-modifying behavior that is unnecessary for routine Excel parsing and increases the script's privileges and attack surface. In this SMS skill context, users expect file parsing and API access, not package management; if the dependency source is tampered with or the environment is sensitive, the install step can execute untrusted code and alter the agent host persistently.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
Automatically installing dependencies during execution is risky because it changes the runtime environment and pulls executable code from external infrastructure without prior confirmation. In an agent skill handling cloud credentials, this increases exposure to dependency confusion, malicious package compromise, and non-reproducible behavior.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal