ClawHub
Back to skill

Security audit

基金新闻日报

Security checks across malware telemetry and agentic risk

Overview

This skill is scoped to collecting public fund news and creating optional Word reports, with a disclosed but important automatic dependency-install step.

Install only if you are comfortable with the agent installing npm and pip dependencies, including a global agent-browser package. For safer use, preinstall reviewed versions yourself or run the skill in an isolated environment. The rest of the skill appears limited to public news collection and local report generation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The skill instructs the AI to automatically install global npm and Python packages, causing system modifications outside the narrow scope of a news-reporting skill. This expands the attack surface by permitting unreviewed package installation, which can introduce supply-chain risk, unexpected privilege use, and persistence-affecting changes on the host.

Context-Inappropriate Capability

Medium
Confidence
92% confidence
Finding
The skill instructs automatic global installation of `agent-browser` via npm and `python-docx` via pip at first use, which expands the runtime environment beyond what a simple news-query skill strictly needs. Installing packages during execution introduces supply-chain and environment-modification risk, especially because global installs can affect other workflows and may pull unpinned code from external registries.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The documentation normalizes making system changes without warning or consent, which is unsafe for an agentic environment. Even if the packages are commonly used, silent installation can be abused or can unexpectedly alter a user's machine, especially when using global npm installs or unrestricted pip installs.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.