ClawHub
Back to skill

Security audit

Website Audit

Security checks across malware telemetry and agentic risk

Overview

This is a German website-audit helper with no bundled executable code, though users must separately trust the external `squirrel` command it tells them to run.

Install only if you are comfortable with a German-language website audit workflow. Before running examples, verify which `squirrel` CLI will execute on your machine, audit only sites you are authorized to test, and review report contents before piping them to external AI services.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
88% confidence
Finding
The manifest description is entirely in German and presents the skill as producing reports and recommendations in that language, with no indication that users can choose another language. This can violate language/locale policy when a skill implicitly forces a specific language without opt-in or documented justification.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.