ClawHub
Back to skill

Security audit

公交地铁线路查询

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims: it sends route-query details to a disclosed cloud proxy to return bus and metro directions.

Install only if you are comfortable sending route queries, including origin, destination, and city, through the publisher's cloud proxy. The embedded proxy token is a publisher-side security hygiene concern, not evidence that the skill is harming users.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
98% confidence
Finding
The script embeds a default proxy token directly in code, which creates a reusable credential for external access if the environment variable is unset. Anyone with source access can extract the token and invoke the proxy service, potentially consuming quota, accessing backend functionality, or impersonating the skill.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
Using a hardcoded fallback token means sensitive credential use occurs even when secure configuration is absent, and the secret is embedded in distributed code. This increases the likelihood of credential leakage and unauthorized use of the external proxy.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.