ClawHub
Back to skill

Security audit

Web Search

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward DuckDuckGo web-search helper, with ordinary privacy and file-saving cautions but no hidden or destructive behavior found.

Install only if you are comfortable sending search queries to DuckDuckGo/DDGS. Do not include secrets or sensitive internal identifiers in queries, and use --output only with paths you intend to create or overwrite, preferably inside the current workspace.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill clearly documents the ability to write arbitrary output files via the --output option, but the metadata shown in the skill does not declare corresponding permissions. Undeclared write capability weakens policy enforcement and user awareness, increasing the risk of unexpected local file modification or overwrite when the skill is invoked.

Description-Behavior Mismatch

Medium
Confidence
92% confidence
Finding
The script exposes an arbitrary filesystem write via the user-controlled --output argument, allowing search results to be written to any path the executing user can access. In an agent/skill context, this exceeds the stated purpose of performing web searches and can be abused to overwrite local files, drop misleading artifacts, or interfere with other components if the caller can influence the output path.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill sends user-provided queries to DuckDuckGo over the network, but the description does not disclose that search terms and related context leave the local environment. This can expose sensitive prompts, internal project names, or other confidential data if users assume the skill operates locally.

Missing User Warnings

Low
Confidence
90% confidence
Finding
The documentation encourages saving results to arbitrary file paths without warning about overwriting existing files or persisting potentially sensitive search output on disk. In practice this can lead to accidental data loss, unsafe writes outside intended directories, or unintentional retention of sensitive research data.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.