ClawHub
Back to skill

Security audit

File Management

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed AgentPMT file-management integration, but users should be careful with permanent deletion and public sharing actions.

Install only if you want AgentPMT-hosted cloud file storage. Before using delete, confirm the exact file_id because deletion is permanent. Before using share or signed download URLs, assume anyone with the link and password constraints may access the file, and avoid uploading secrets unless your AgentPMT setup and retention needs are appropriate.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill documents destructive (`delete`) and privacy-sensitive (`share`, `access_history`, `download`) file operations, but it does not present a clear user-warning or confirmation section for irreversible deletion, public sharing, or exposing file contents/metadata. In an agent setting, this increases the chance of unsafe autonomous use, accidental data disclosure, or unintended permanent deletion, especially because the tool is designed for persistent cross-run file storage.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The schema exposes a permanently destructive delete action with no indication that callers should require explicit user confirmation or verify file ownership/intent before invocation. In an agent setting, this increases the chance of accidental or prompt-induced irreversible deletion of user data.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The share action creates or refreshes a public share link, but the documentation does not warn that this can expose file contents outside the original trust boundary. In an autonomous agent workflow, missing privacy guidance can lead to oversharing sensitive files through signed/public links with weak usage constraints.

VirusTotal

54/54 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.