ClawHub
Back to skill

Security audit

拼多多 电商视频生成与编辑

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a normal AI video-generation connector, with user-directed API key setup and media uploads to AI Hive.

Install only if you are comfortable giving AI Hive an API key and uploading the product images, videos, or audio files you explicitly pass to the tool. Review costs before batch generation, and treat the local ~/.ai-hive/config.json file as a credential file.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill invokes shell commands, performs package installation, reads and writes local files, accesses environment variables, and uses networked tooling, yet it declares no permissions. This weakens user consent and sandbox enforcement because operators may not realize the skill can install dependencies, persist data, or exfiltrate secrets through outbound requests.

Tp4

High
Category
MCP Tool Poisoning
Confidence
98% confidence
Finding
The advertised purpose is narrowly scoped to Pinduoduo video generation/editing, but the referenced tooling reportedly also supports unrelated account queries, wallet/balance access, generic chat, broad media upload, and interactive API key acquisition/storage. That scope expansion is dangerous because users may authorize an ecommerce media skill without expecting credential handling, browser launching, account access, or generic data transmission capabilities.

Description-Behavior Mismatch

Medium
Confidence
91% confidence
Finding
The file exposes a full general-purpose AI Hive client with chat, model enumeration, account inspection, upload, and image/video generation, which is substantially broader than the declared Pinduoduo video-generation/editing skill. Over-scoped skills increase attack surface and let a caller use unrelated capabilities under the guise of a narrowly scoped ecommerce workflow.

Context-Inappropriate Capability

Low
Confidence
84% confidence
Finding
The skill includes a user-info endpoint that reveals account information and wallet balance, which is unrelated to video generation/editing. Even if intended for troubleshooting, it unnecessarily exposes sensitive account metadata and broadens what an invoking agent can inspect.

Static analysis

No suspicious patterns detected.