ClawHub
Back to skill

Security audit

Tencent Map

Security checks across malware telemetry and agentic risk

Overview

This Tencent Maps skill mostly matches its stated purpose, but its generic API helper can send the map API key to an unintended host if given a crafted path.

Review before installing. Use only trusted, Tencent Maps `/ws/...` paths with the `call` command, and avoid giving the skill access to a high-value or broadly privileged Tencent Maps key until the helper validates paths or enforces the `apis.map.qq.com` host.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill declares operational behavior that uses environment variables (`QQMAP_KEY`) and outbound network access to `apis.map.qq.com`, but no explicit permissions are declared. This creates a transparency and governance gap: an agent or platform may invoke networked functionality and consume secrets without users or policy engines having a clear permission contract.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.