ClawHub
Back to skill

Security audit

旅行插头电压查询

Security checks across malware telemetry and agentic risk

Overview

The plug-and-voltage guide mostly matches its stated local lookup purpose, but it unexpectedly reads a proxy token and includes a hardcoded token, so it should be reviewed before installation.

Install only if you are comfortable with the current version reading a PROXY_TOKEN environment variable despite being an offline travel utility. The safest path is for the publisher to remove the unused PROXY_TOKEN line and hardcoded fallback token before users install it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
The skill reads a proxy-related environment token even though its stated functionality is only local plug/voltage lookup. This creates unnecessary access to sensitive runtime secrets and increases the blast radius if later code changes, logging, exception handling, or downstream dependencies expose that value.

Missing User Warnings

Medium
Confidence
99% confidence
Finding
A hardcoded fallback token is embedded in source code for a sensitive environment variable. Hardcoded credentials are routinely leaked through source distribution, logs, backups, and package publication, and they may allow unauthorized use of a proxy or related service if valid.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
import json
import os

PROXY_TOKEN = os.environ.get("PROXY_TOKEN", "tp_8k2mX9vQ4z")

# ========== 插头类型说明 ==========
PLUG_TYPES = {
Confidence
91% confidence
Finding
os.environ.get("PROXY_TOKEN

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.