Skill Trust Decision
grok-image-tool-pro
Pure documentation skill providing Grok batch image-generation guidance; all tool usage (read/exec/write) is declared and matches documented behavior, with no hidden implementation or malicious code.
Why this conclusion was reached
0/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
3 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
Broad 'exec' tool declaration +15
SKILL.md declares 'exec' tool for shell-based workflow automation; while declared, it enables arbitrary command execution with wide blast radius
Filesystem write to arbitrary paths +10
Skill creates directories and moves/renames files across arbitrary paths including $HOME/Downloads
Documentation completeness mitigates risk +-5
All tool usage, workflow steps, and security caveats are documented; no hidden functionality detected
Most important evidence
Medium Priv Escalation
Broad shell execution tool declared
The 'exec' tool is declared for workflow automation, enabling arbitrary shell commands (mkdir, mv, convert, sleep, etc.). While declared, it provides wide blast radius for file and system operations.
SKILL.md:6 Consider restricting exec to a whitelist of safe commands (mkdir, mv, python3) or use a sandboxed execution environment for batch workflows.
Low Sensitive Access
Access to user Downloads directory
Batch workflow examples reference $HOME/Downloads for saving generated images before renaming and moving to output directories, which touches user home directory.
SKILL.md:150 Use a dedicated workflow output directory and avoid touching the user's default Downloads folder to prevent file collision or data leakage.
Low Doc Mismatch
Duplicate '核心功能' section
SKILL.md contains a duplicated '核心功能' (Core Functions) section near the end, which appears to be a documentation artifact rather than a security issue.
SKILL.md:492 Remove duplicate documentation section to avoid confusion.
Declared capability vs actual capability
Filesystem Pass
Declared READ
→ Inferred READ
SKILL.md declares 'read' tool; file operations limited to image workflow paths Filesystem Pass
Declared WRITE
→ Inferred WRITE
SKILL.md declares 'write' tool; creates output dirs, renames/moves image files Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md declares 'exec' tool; bash scripts create dirs, mv files, sleep intervals, ImageMagick convert commands Network Pass
Declared NONE
→ Inferred NONE
No direct network requests in skill code; browser automation via external tools handles grok.com; Feishu via 'message tool' Browser Pass
Declared READ
→ Inferred READ
Browser automation declared via 'playwright' and 'desktop-agent' in SKILL.md examples Environment Pass
Declared NONE
→ Inferred NONE
No environment variable access in skill; security note explicitly advises against hardcoding keys Suspicious artifacts and egress
Medium External URL
https://grok.com/imagine SKILL.md:140
Medium External URL
https://clawhub.ai/user/thcjp skill-card.md:9
Medium External URL
https://clawhub.ai/thcjp/skills/grok-image-tool-pro skill-card.md:39
Dependencies and supply chain
There are no structured dependency warnings.
File composition
3 files · 565 lines
Markdown 2 files · 560 linesJSON 1 files · 5 lines
Files of concern · 2
SKILL.md Broad shell execution tool declared · Access to user Downloads directory · Duplicate '核心功能' section · https://grok.com/imagine
skill-card.md https://clawhub.ai/user/thcjp · https://clawhub.ai/thcjp/skills/grok-image-tool-pro
Other files · _meta.json
Security positives
All tool usage (read/exec/write) is explicitly declared in SKILL.md frontmatter
No scripts or implementation files present — pure documentation; no hidden code
No credential harvesting or environment variable access observed
No data exfiltration or C2 communication detected
No base64, eval, obfuscation, or anti-analysis patterns found
Security notes explicitly advise against hardcoding API keys
skill-card.md accurately summarizes known risks with mitigations
MIT-0 license permits broad use with minimal restrictions
Callback/Feishu delivery risks are called out in skill-card.md