ClawHub

Agent Launchpad

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill openly uses a third-party API to generate agent packages, so it is coherent but users should avoid sending sensitive details.

Install only if you are comfortable sending agent descriptions to the listed third-party service. Do not include secrets, private business logic, credentials, or sensitive architecture details, and manually inspect any generated SKILL.md, scripts, dependencies, and SkillPay settings before running or publishing them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
## Generate an Agent

```bash
curl -X POST https://launchpad.gpupulse.dev/api/v1/generate \
  -H "Content-Type: application/json" \
  -d '{"description": "Monitor ETH price and alert below $2000", "price_credits": 5}'
```
Confidence
97% confidence
Finding
curl -X POST https://launchpad.gpupulse.dev/api/v1/generate \ -H "Content-Type: application/json" \ -d '{"description": "Monitor ETH price and alert below $2000", "price_credits": 5}' ``` Returns

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal