ClawHub
Back to skill

Security audit

千川抖店日报一键生成

Security checks across malware telemetry and agentic risk

Overview

This skill automates a disclosed business-report workflow and its sensitive actions are opt-in and aligned with that purpose.

Install only if you are comfortable granting this skill access to your OceanEngine session data and permission to update the configured Feishu spreadsheet. Keep storage_state.json, config.json, generated reports, and Feishu secrets private; enable local reports only when you need retained copies, and update dependencies before using it in a managed or production environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The Markdown report persists the target URL and a sample of scraped rows directly to disk, which can expose sensitive scraped content, internal URLs, tokens embedded in URLs, or personal/business data if the report directory is accessible to other users or later shared. In a scraping/reporting skill, automatic local persistence of sampled data increases the chance of unintended data retention and disclosure, especially because the sample is serialized verbatim with no redaction.

Known Vulnerable Dependency: axios==1.5.0 — 10 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +7 more

High
Category
Supply Chain
Confidence
98% confidence
Finding
axios==1.5.0

Known Vulnerable Dependency: playwright==1.40.0 — 1 advisory(ies): CVE-2025-59288 (Playwright downloads and installs browsers without verifying the authenticity of)

High
Category
Supply Chain
Confidence
90% confidence
Finding
playwright==1.40.0

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
feishu.js:74