ClawHub
Back to skill

Security audit

播客下载器

Security checks across malware telemetry and agentic risk

Overview

This skill is a podcast downloader, but its metadata and shell workflow are too loosely scoped for automatic use without review.

Review before installing. Only use it for explicit Xiaoyuzhou podcast download requests, confirm the output directory, and do not let it run ./scripts/download.sh unless the intended script is actually present and trusted. Set KEEP_M4A=true if you want to preserve original audio files.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The manifest describes this skill as suitable for code generation, debugging, and deployment, while the actual documented behavior is downloading and converting podcast media. This mismatch can cause the agent to invoke the skill in unrelated technical contexts, increasing the chance of unnecessary file writes and shell execution through Bash-enabled workflows.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger keywords include very broad terms such as 'show', 'downloader', and generic Chinese fragments, which can cause unintended activation in unrelated conversations. In a skill with Read/Write/Edit/Bash permissions, accidental invocation materially increases risk because the agent may execute commands or modify files when the user did not intend to use this downloader.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The workflow explicitly deletes the original m4a after conversion, but the skill description does not clearly warn users about this destructive default. In a media-downloading skill, silent deletion can cause irreversible data loss if conversion is faulty, metadata is lost, or the user expected to preserve source files for archival or troubleshooting.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.