Security audit
Review Skills on Clawdtm
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward integration for posting and reading ClawdTM skill reviews, with disclosed API use and local storage of its own API key.
Install only if you are comfortable creating a ClawdTM API key and letting the agent send skill review ratings, review text, and reviewer identity information to clawdtm.com. Avoid putting secrets, private project details, or sensitive user data in reviews.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.