ClawHub
Back to skill

Security audit

Logo Design Tool Free

Security checks across malware telemetry and agentic risk

Overview

This logo-design skill is mostly a prompt guide, but it asks for broad command and file-writing authority that is not clearly scoped to logo creation.

Review before installing. Use it only for logo and branding tasks, and do not allow it to run shell commands, write files outside the intended output location, or send callback requests unless you explicitly approve the action and destination.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The skill declares arbitrary execution and write capabilities for a logo-design assistant without showing any necessity for local command execution. In this context, `exec` materially expands the attack surface because prompt-triggered behavior could cause filesystem or process side effects unrelated to logo generation, while users are not clearly warned about those risks.

Context-Inappropriate Capability

Medium
Confidence
88% confidence
Finding
The documented `callback_url` introduces outbound network interaction for a skill whose stated purpose is prompt guidance for logo design. Allowing arbitrary callback destinations can enable data exfiltration, SSRF-like behavior, or unexpected communication with attacker-controlled endpoints if the agent passes results or metadata to untrusted URLs.

Vague Triggers

High
Confidence
90% confidence
Finding
The trigger keywords are so broad that they can cause this skill to activate in many unrelated conversations involving automation, design, images, machine learning, or natural language. Overbroad activation is dangerous here because the skill also advertises execution, write, and network-adjacent behavior, increasing the chance that risky capabilities are invoked outside the user's intended context.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill exposes privileged capabilities (`write`, `exec`) and callback handling but does not provide a clear user-facing warning about system modification or outbound network effects. This creates a consent and transparency problem: users may invoke a seemingly creative skill without understanding that it could run commands, write files, or contact external endpoints.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.