ClawHub
Back to skill

Security audit

Xeon Smartupscale

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real video upscaling skill, but its installer downloads and executes third-party code and binaries without integrity checks.

Install only after reviewing install.sh and preferably in a disposable environment. If possible, install ffmpeg yourself from a trusted package manager, ensure pip is already available, and use new output filenames so existing videos are not overwritten.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
92% confidence
Finding
The installer performs multiple network downloads during setup, including Python bootstrapping and binary retrieval, without integrity verification, signature checks, or explicit consent. In a video upscaling skill, fetching dependencies can be legitimate, but silently downloading and executing remote content expands the trust boundary and creates a supply-chain risk if the remote source or connection is compromised.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill description describes writing a new output video and accepting a user-specified output path, but it does not clearly warn that an existing file at that path may be overwritten or replaced. In a shell-oriented workflow, this can lead to accidental data loss or destructive writes, especially when agents supply paths automatically.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The command downloads a remote Python script and immediately executes it via a pipe, giving the fetched content full code execution rights inside the install environment. This is dangerous because any compromise of the upstream host, TLS interception, or unexpected content change results in arbitrary code execution during installation.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The installer downloads prebuilt ffmpeg binaries and writes them into the skill directory without prior warning or integrity validation. While ffmpeg is relevant to video processing, silently retrieving executables from the network introduces supply-chain risk and can lead to execution of tampered binaries.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.