ClawHub
Back to skill

Security audit

Xiaomi

Security checks across malware telemetry and agentic risk

Overview

This Xiaomi smart-home skill is purpose-aligned, but it needs Review because it handles device-control tokens and can issue physical appliance commands without enough scoping or secret-handling guidance.

Install only if you are comfortable giving the agent local control over the listed Xiaomi devices. Treat Xiaomi tokens like passwords: do not commit, paste, or store them in shared markdown files. Review any token-extraction script before running it, and require explicit confirmation before commands that turn on power, heating, cooking, or other physical device states.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill explicitly promotes a built-in token extractor for Xiaomi Cloud and frames it as easy to use, but provides no warning that device tokens are sensitive credentials that can enable direct LAN control of smart-home devices. In this context, disclosure or mishandling of those tokens could let an attacker control household devices or enumerate the user's device inventory.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The setup instructions direct the user to run a token-extraction script against their Xiaomi account without any disclosure of what account access is required, what data will be retrieved, or the privacy/security implications. Because the skill's purpose is device control, this omission is materially risky: users may execute credential-harvesting logic without understanding that it can expose account-linked device metadata and control tokens.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill instructs users to store device details in markdown files, but in this skill those details are likely to include IP addresses and Xiaomi device tokens, which are effectively secrets for local device control. Storing them in ordinary reference files increases the chance of accidental disclosure through version control, logs, backups, or sharing of the skill directory.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.