ClawHub
Back to skill

Security audit

XML读取器免费版

Security checks across malware telemetry and agentic risk

Overview

This skill is mostly an XML reader, but its instructions conflict about whether it may write, modify, delete, import, export, or save files.

Install only if you are comfortable with an XML helper whose documentation is inconsistent about write and export behavior. Treat it as Review-worthy until the publisher clarifies the free edition as strictly read-only or explicitly documents when file writes, imports, exports, modifications, and deletes may occur.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
The skill documentation is internally inconsistent: it presents the free edition as a read-only XML reader, but the capability sections explicitly describe create, modify, delete, import, and export-style operations. In an agent context with `exec` and `write` tools available, this ambiguity can cause the model or user to authorize file-changing behavior they did not intend, leading to unauthorized modification or deletion of local XML/configuration files.

Intent-Code Divergence

Medium
Confidence
93% confidence
Finding
The document later states the free edition cannot export to files or JSON, but earlier sections advertise save, export, convert, and formatted file output. This contradiction can mislead an agent into writing data to disk or transforming files despite the safety expectation that the tool is read/query only.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
Advertising modify, delete, save, import, and export operations in a skill framed as a read-only XML reader expands the apparent permission scope without warning. In a command-executing agent environment, that mismatch is dangerous because users may invoke the skill assuming inspection-only behavior while the agent may perform state-changing actions on local files.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.