ClawHub
Back to skill

Security audit

Nano Banana 电商主图｜Nano Banana 2 商品图

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed AI image-generation helper that uploads only user-selected product images to AI Hive and stores credentials only when the user explicitly asks it to.

Install only if you are comfortable sending the selected product reference images and prompt details to AI Hive. Use the brief command when you only want to inspect the prompt without upload or cost, and be aware that the auth command stores the AI Hive API key locally in ~/.ai-hive/config.json.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding
Without declared permissions the skill's intent is opaque and cannot be validated.

Natural-Language Policy Violations

Medium
Confidence
97% confidence
Finding
The file’s docstring and CLI/error messages are written exclusively in Chinese, which imposes a specific language on users without offering any language or locale choice. The policy for this audit flags language-forcing behavior unless the locale constraint is explicitly documented and justified or the user is given an opt-in choice.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
def load_key(explicit=None):
    if explicit:
        return explicit
    environment = os.environ.get("AI_HIVE_API_KEY")
    if environment:
        return environment
    try:
Confidence
70% confidence
Finding
Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.