ClawHub
Back to skill

Security audit

product-photo-to-video

Security checks for vulnerabilities and agentic risk

Overview

The scanners classify this product photo-to-video skill as benign because the reported external services fit its stated workflow, though they flag disclosure and version-pinning gaps; confidence is medium and coverage is incomplete.

Before installing, consider whether you are comfortable sending product photos and related details to external services. The scanner recommends reviewing the installation source because the CLI version is unpinned. The scan covered all four listed components but was marked partial due to an unresolved local reference, so the evidence is incomplete.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

The photo-to-video workflow does not warn that user-provided product images are sent to external services.

Medium
Category
Output Handling
Confidence
89% confidence
Finding

The README identifies varg and several generation services but does not explicitly explain that source photos and derived product details leave the user's environment for processing. This disclosure gap matters for unreleased packaging, confidential labels, or photos containing personal information, although the cloud-service context makes external processing less surprising.

Content

No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx skills'.

Medium
Category
MCP Rug Pull
Confidence
88% confidence
Finding

The installation example invokes an unpinned npm CLI through npx skills, allowing the executable version to change between installations. A compromised future release could execute code with the installing user's permissions; however, the finding incorrectly describes this CLI as an MCP server, and there is no evidence of an actual compromise.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 40)May include surrounding context.

md
What wins in late 2026 is one impossible but tactile moment built around the real product: a macro pour, a lid snap, an ingredient burst, a hands-only unboxing. What fails: logo-first "cinematic" b-roll, still-photo slideshows (TikTok Shop bans them in shoppable videos), and any frame where the model rewrote the label.

Generation runs on varg (MCP `call_tool` or `POST https://api.varg.ai/v2/tools/{image|video}/call`). **Quote with `estimate_cost` and wait for a yes before each paid step.** A still costs cents to fix; a clip costs dollars, so approve stills first.

## 1. Product truth sheet (free, do it first)