ClawHub
Back to skill

Security audit

Open Slide

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to do what it claims: help create and export open-slide presentations, with ordinary dependency and artifact-sharing cautions.

Install only if you are comfortable allowing the agent to run npm or pnpm, pip, Playwright/Chromium, and local browser-based export commands. Prefer pinned dependency versions in a controlled environment, review generated PDFs or ZIP contents before sharing, and avoid the optional CDP connection unless you deliberately want the script to use an already-running browser session.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Unpinned Dependencies

Low
Category
Supply Chain
Content
playwright>=1.40
Pillow>=10.0
Confidence
94% confidence
Finding
The dependency specifier `playwright>=1.40` is unpinned, so installs may resolve to different versions over time. This weakens build reproducibility and can silently introduce breaking changes or newly introduced vulnerable releases into the skill environment.

Unpinned Dependencies

Low
Category
Supply Chain
Content
playwright>=1.40
Pillow>=10.0
Confidence
97% confidence
Finding
The dependency specifier `Pillow>=10.0` is unpinned, allowing installation of any future Pillow release that satisfies the range. Because Pillow has a history of security advisories and processes potentially attacker-controlled image data, leaving it unpinned increases the chance of pulling in a vulnerable or incompatible version unnoticed.

Known Vulnerable Dependency: Pillow — 10 advisory(ies): CVE-2016-2533 (Pillow buffer overflow in ImagingPcdDecode); CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2021-27922 (Pillow Uncontrolled Resource Consumption) +7 more

Critical
Category
Supply Chain
Confidence
90% confidence
Finding
The requirement references Pillow without constraining it to a known safe patched version, while the package has multiple published security advisories including resource-consumption and possible code-execution issues. In a slide-creation skill, image handling is a core feature, so maliciously crafted images could plausibly reach this library and trigger vulnerable code paths.

Static analysis

No suspicious patterns detected.