ClawHub
Back to skill

Security audit

Multilingual KB Template Sync

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed workflow for translating a specific knowledge-base file and optionally syncing the result to Feishu, GitHub, and git.

Install this only if you want an agent to help edit multilingual customer-service templates and publish updates to Feishu or GitHub. Before running the scripts, review the markdown and changelog content, confirm the Feishu document or space and GitHub repository, and use least-privilege tokens; skip the external sync steps for local-only translation work.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill instructs the agent to execute shell commands (`bash scripts/sync-feishu.sh`, `bash scripts/create-github-issue.sh`, `git ...`) but does not declare permissions or otherwise signal that command execution is required. This creates a trust and review gap: a user may invoke the skill expecting document editing, while the agent is guided to run local scripts and network-capable tooling that can access credentials, modify files, and transmit data externally.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
This section directs syncing a workspace file to Feishu Wiki, which sends local content to an external service, but it does not clearly warn the user at the point of action that workspace data will leave the local environment. In a skill that processes knowledge-base templates, this is risky because the markdown may contain internal support procedures, unreleased messaging, or other sensitive business content that could be disclosed unintentionally.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
This section instructs creating a GitHub issue using metadata and changelog derived from a local file, but it does not explicitly warn that extracted content will be sent to GitHub. Even if only metadata is intended, issue bodies and titles can include internal project details, operational notes, or sensitive change context, leading to unintended disclosure to a third-party platform or a public repository if misconfigured.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
references/feishu-api.md:5