ClawHub
Back to skill

Security audit

Lanzou Downloader V0.0.5

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Lanzou downloader, but it disables HTTPS certificate checks and does not enforce its stated domain limits.

Review before installing. Use only with trusted Lanzou links, and prefer a version that keeps normal HTTPS certificate validation enabled and enforces a strict allowlist for Lanzou/CDN domains before sending passwords or writing downloaded files.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill explicitly describes making outbound network requests to multiple Lanzou-related domains, yet the static finding indicates no declared permissions are present. Undeclared network capability is dangerous because it weakens sandboxing, review, and user trust boundaries: a skill that can fetch remote content and download files can be abused to access unexpected endpoints, exfiltrate user-provided secrets like share passwords, or retrieve malicious payloads if routing or domain validation is incomplete. The context makes this somewhat expected for a downloader skill, but not less risky; a networked downloader should be held to stricter permission declaration and host allowlisting because its core behavior is remote content retrieval and file writing.

Missing User Warnings

Medium
Confidence
99% confidence
Finding
Outbound requests set rejectUnauthorized: false, which disables TLS certificate validation and allows man-in-the-middle interception or tampering by any attacker able to influence the network path. In this skill, that is especially dangerous because the tool parses server-controlled HTML/JS, handles passwords, and derives download URLs from remote responses, so a network attacker could alter content, steal passwords, or redirect downloads.

Missing User Warnings

Medium
Confidence
99% confidence
Finding
The streamed download path also disables TLS verification, enabling attackers on the network to substitute arbitrary files or corrupt downloads while appearing to come from the intended HTTPS endpoint. Because this script writes the fetched content directly to disk, users may receive trojanized or unsafe files without detection.

Static analysis

Detected: suspicious.insecure_tls_verification

HTTPS certificate verification is disabled.

Warn
Code
suspicious.insecure_tls_verification
Location
scripts/download.js:61