ClawHub
Back to skill

Security audit

Tg Search

Security checks across malware telemetry and agentic risk

Overview

This is a small, disclosed wrapper for a local Telegram search command, with no evidence of hidden persistence, exfiltration, or destructive behavior.

Install only if you intend to use a local authorized Telegram search setup. Before using it, confirm that /usr/local/bin/tg_search is installed from a source you trust and that using its Telethon session for public Telegram searches is acceptable in your environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
query = sys.argv[1]
    limit = sys.argv[2] if len(sys.argv) >= 3 else "10"

    p = subprocess.run(
        ["/usr/local/bin/tg_search", query, limit],
        capture_output=True,
        text=True
Confidence
70% confidence
Finding
p = subprocess.run( ["/usr/local/bin/tg_search", query, limit], capture_output=True, text=True )

Context-Inappropriate Capability

Medium
Confidence
85% confidence
Finding
No manifest is available, so the skill's purpose is unknown and there is no declared justification for spawning a local binary. The code delegates its core behavior to /usr/local/bin/tg_search via subprocess, which is a materially powerful capability beyond simple argument handling or JSON formatting.

Unvalidated Output Injection

High
Category
Output Handling
Content
query = sys.argv[1]
    limit = sys.argv[2] if len(sys.argv) >= 3 else "10"

    p = subprocess.run(
        ["/usr/local/bin/tg_search", query, limit],
        capture_output=True,
        text=True
Confidence
95% confidence
Finding
subprocess.run( ["/usr/local/bin/tg_search", query, limit], capture_output

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.