ClawHub
Back to skill

Security audit

Team

Security checks across malware telemetry and agentic risk

Overview

This is a text-only teamwork prompt with broad autonomous language but no code, install commands, credential use, or hidden data access.

Install this only if you want an agent to reason in a multi-agent team-management style. Set explicit boundaries for delegation, sensitive information sharing, persistence, and any resource or credit decisions before using it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The manifest description is extremely broad and generic, describing a wide orchestration framework rather than clear, bounded conditions for when the skill should be invoked. In an agentic system, vague invocation criteria can cause over-triggering or misuse in unrelated contexts, expanding the skill's authority surface and increasing the chance that downstream orchestration or resource-routing behavior is applied where it is not appropriate.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.