ClawHub
Back to skill

Security audit

Ui Ux Dev Paid

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed UI/UX development helper that writes local project files, captures local screenshots, converts images, and packages projects, with no evidence of hidden exfiltration or destructive behavior.

Install only if you are comfortable allowing the agent to create or modify local project files, run shell tools, open local pages in a browser for screenshots, and load React/Tailwind/font assets from public CDNs. Review generated zip contents before sharing them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Intent-Code Divergence

Low
Confidence
91% confidence
Finding
The document frames screenshotting, image conversion, and packaging as local operations, yet the supplied HTML template loads React, Tailwind, Babel, and fonts from third-party CDNs. In practice, screenshots of rendered pages can trigger external requests, exposing project metadata and making builds dependent on mutable remote content.

Intent-Code Divergence

Medium
Confidence
91% confidence
Finding
The document frames screenshotting, image conversion, and packaging as local operations, yet the supplied HTML template loads React, Tailwind, Babel, and fonts from third-party CDNs. In practice, screenshots of rendered pages can trigger external requests, exposing project metadata and making builds dependent on mutable remote content.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill documents commands that create directories, write project files, and generate zip archives under /tmp without clearly warning that local files will be modified or overwritten. In an agentic environment with exec/write access, this increases the risk of unintended filesystem changes, clobbering existing files, or packaging sensitive content into archives.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The screenshot automation behavior implies loading localhost pages that may in turn fetch CDN-hosted assets, but the skill does not clearly warn users about outbound network access or privacy implications. This can leak page access patterns, internal project names, or other metadata during automated review runs.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.