ClawHub

Ai Fermentation

Security checks across malware telemetry and agentic risk

Overview

This is a simple fermentation guidance skill with no executable code, install hooks, persistence, credential access, or hidden behavior.

Before using it for actual food or beverage preparation, ask for detailed safety checks for the specific recipe, including sanitation, temperature, pH or acidity targets, spoilage signs, bottling pressure, when to discard a batch, and local alcohol laws. Do not treat the skill as a substitute for authoritative food-safety or legal guidance.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill provides extensive home fermentation and brewing guidance, including low-acid fermentation, dairy fermentation, and alcohol production, but does not include explicit food-safety warnings, contamination checks, discard criteria, or limits on unsafe practices. In this context, omission of safety guidance can plausibly lead users to follow hazardous procedures that increase risk of foodborne illness, contamination, pressure-related bottle explosions, or illegal/unsafe brewing behavior.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal