ClawHub
Back to skill

Security audit

UI/UX开发工具免费版

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed UI prototyping helper that writes local React pages and uses local tools/CDNs for preview, screenshot review, and image conversion.

Before installing, be aware that this skill will guide your agent to create and modify local project files, run local Bash commands for previews/screenshots/image conversion, and generate pages that load third-party CDN libraries. Review any referenced helper script or package-install command before running it, especially commands using sudo.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The skill declares broad exec capability and repeatedly instructs running Bash-based helper scripts, which materially expands the attack surface beyond simple UI generation. In an agent context, undocumented or loosely constrained shell execution can be repurposed to run arbitrary local commands, access files, or invoke network tools under the user's privileges.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill relies on network-loaded CDN resources but does not clearly disclose that generated pages will fetch third-party code at runtime. This creates supply-chain and privacy risk: opening the generated page can leak metadata to external providers and execute remote dependencies that may change over time.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
brew install webp
# .
# Ubuntu/Debian
sudo apt install webp
# .
# Windows
# 下载 libwebp 并添加到PATH
Confidence
86% confidence
Finding
The documentation instructs use of a privileged installation command (`sudo apt install webp`). In an agent-assisted execution environment, normalizing privileged commands increases the risk that users or agents run elevated operations unnecessarily, which is dangerous if the surrounding workflow or substituted commands are tampered with.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.