ClawHub
Back to skill

Security audit

AI电商专家｜快手电商 图片视频全内容

Security checks across malware telemetry and agentic risk

Overview

The skill appears aligned with IMIVA ecommerce content generation, but it runs a live npm package with broad environment access while handling an ecommerce token and business media.

Install only if you trust the IMIVA/@infimind npm package and are comfortable sending selected product media and task data to IMIVA with your MCP token. Prefer a clean shell or host-managed secret injection, avoid running this in environments with unrelated secrets, and consider pinning the npm package version before use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
env = os.environ.copy()
    env["MCP_TOKEN"] = token
    env["API_URL"] = os.environ.get("IMIVA_API_URL", os.environ.get("API_URL", DEFAULT_API_URL))
    proc = subprocess.Popen(
        [npx, "-y", PACKAGE],
        stdin=subprocess.PIPE,
        stdout=subprocess.PIPE,
Confidence
91% confidence
Finding
proc = subprocess.Popen( [npx, "-y", PACKAGE], stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, bufsize=1,

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill instructs users to run shell commands, read local files via $SKILL_PATH, and configure environment variables containing an MCP token, yet it declares no permissions or capability boundaries. This creates a trust gap: users or hosts may execute a skill with shell, file, and env access without explicit disclosure, increasing the chance of over-privileged execution and accidental secret exposure.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The file silently executes a remote npm package without disclosing that behavior to the user at the point of execution. Even if this is intended product behavior, lack of disclosure undermines informed consent and increases the chance that users expose local environment secrets or run unreviewed code unexpectedly. In a skill that processes business assets and API tokens, this omission is more dangerous because users may assume they are invoking only local Python logic.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
def invoke(method: str, params: dict | None = None) -> dict:
    npx, token = require_runtime()
    env = os.environ.copy()
    env["MCP_TOKEN"] = token
    env["API_URL"] = os.environ.get("IMIVA_API_URL", os.environ.get("API_URL", DEFAULT_API_URL))
    proc = subprocess.Popen(
Confidence
88% confidence
Finding
os.environ.copy()

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.