ClawHub
Back to skill

Security audit

围棋分享棋谱下载器

Security checks across malware telemetry and agentic risk

Overview

This skill is a Go game-record downloader whose network access, browser automation, and local SGF file writes match its stated purpose.

Install this only if you are comfortable with it contacting supported Go platforms, launching a headless browser for some links, and saving SGF files locally. Use trusted public share links, avoid arbitrary or internal/private URLs, choose an explicit -o path for files you want to keep, and avoid debug capture unless raw payload files in /tmp are acceptable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill clearly describes capabilities to read/write files and perform network access, yet no declared permissions are shown. This creates a transparency and consent problem: a user or hosting agent may invoke a skill that writes files to disk and reaches third-party services without an explicit permission contract.

Missing User Warnings

Low
Confidence
86% confidence
Finding
The skill writes downloaded content to disk by default, including under /tmp, but the warning is not prominent at the point of use. Silent local writes can surprise users, expose data to other local processes depending on system configuration, and cause unintentional retention of downloaded records.

Missing User Warnings

Low
Confidence
88% confidence
Finding
Some platforms use Playwright and direct requests to third-party APIs/WebSockets, but this is not surfaced as a clear privacy and execution warning. Users may not realize the skill launches a browser, executes page logic, and contacts external services, which affects trust, privacy, and runtime exposure.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
In debug mode, the code writes raw captured WebSocket payloads to a predictable location under /tmp. Those payloads may contain sensitive game/session data, and /tmp is commonly shared across users/processes on multi-user systems, making unintended disclosure possible via local access, symlink races, or later forensic recovery.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.