ClawHub
Back to skill

Security audit

Rednote Creator

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Rednote/Xiaohongshu content assistant with optional cover-image sourcing and user-confirmed publishing, not hidden or destructive behavior.

Before installing, understand that this skill can help prepare public social-media posts and may download placeholder stock images if image generation is unavailable. Review all generated text, tags, images, and browser actions before confirming publication, and prefer your own original photos for copyright and platform originality reasons.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Description-Behavior Mismatch

Medium
Confidence
86% confidence
Finding
The fallback behavior expands the skill from content creation/publishing into downloading third-party images to local storage, which introduces external-content ingestion and local file handling not obvious from the primary one-click publishing claim. Even though the text warns about originality limits, this still creates risk around copyright misuse, unintended handling of untrusted remote content, and user confusion about what the agent will fetch and store.

Context-Inappropriate Capability

Medium
Confidence
89% confidence
Finding
The instructions explicitly tell the agent to search for, download, and store external stock images locally, which is a meaningful capability increase beyond drafting text and assisting publication. This is dangerous because it causes the skill to retrieve untrusted remote assets and persist them on disk, raising copyright, provenance, and file-safety concerns, especially in an automated publishing workflow.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.