ClawHub
Back to skill

Security audit

本地图表生成引擎

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a local charting guide, but it includes unexplained API key, callback URL, and API connection instructions that conflict with its offline-only claim.

Review this skill carefully before installing. It appears intended for local chart generation, but do not provide API keys, credentials, or callback URLs unless the publisher clarifies why they are needed, where data is sent, and what permissions are required. Treat generated chart files and history as retained local data and remove them when they contain sensitive information.

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
94% confidence
Finding
The skill repeatedly claims it is fully local and does not rely on external APIs, yet the document also defines a callback_url input and instructs users to configure API keys. This contradiction can mislead operators into granting network/API permissions or exposing secrets to a skill they believe is offline-only, weakening trust boundaries and review decisions.

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
Later deployment steps tell users to configure API keys, establish API connections, and call interfaces despite earlier statements that no networking is required. This can cause unsafe deployment assumptions, accidental secret provisioning, and unexpected outbound connectivity in environments that would have approved a strictly local charting tool.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The skill persists chart outputs and a history index under the user's home directory, but the general description does not give a clear upfront warning that data will be retained on disk. Users may pass sensitive business data assuming ephemeral processing, resulting in unintended local retention, discoverability by other local users/processes, and compliance issues.

Static analysis

No suspicious patterns detected.