ClawHub
Back to skill

Security audit

Popcorn CLI

Security checks across malware telemetry and agentic risk

Overview

The skill mostly matches its stated Popcorn CLI purpose, but the installed CLI includes an under-disclosed persistent backend URL override that could redirect API-key-authenticated requests.

Install only if you trust the Popcorn service and the npm publisher. Check `popcorn-cli config show` before use, keep `~/.popcorn-cli/config.json` private, avoid shared machines, and do not submit confidential prompts, media parameters, or business data unless approved. Treat any use of `config set-url` as sensitive because it changes where the API key and task payloads are sent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly documents that the API key is stored in `~/.popcorn-cli/config.json` but does not warn that this is local plaintext secret storage. In an agent, multi-user, CI, or shared workstation context, plaintext credentials can be exposed through backups, logs, home directory access, or accidental disclosure, increasing the risk of unauthorized backend access.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The description says the CLI uses a locally configured API key to call Popcorn backend services, but it does not clearly warn users that both their API key and task payloads are transmitted to a remote service. For an agent skill that may handle prompts, media generation parameters, or sensitive workflow data, omission of this disclosure can cause users to send confidential information off-host without informed consent.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.