ClawHub
Back to skill

Security audit

moodle

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent Moodle helper, but it can send a Moodle API token to a hard-coded default server if the user does not set their own Moodle URL.

Review before installing. Set MOODLE_URL explicitly to your own Moodle instance before using the skill, use a dedicated least-privilege Moodle token, avoid sharing command outputs or logs, and rotate the token if you may have run the examples without MOODLE_URL set.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The README instructs users to configure a long-lived Moodle API token and server URL, but it does not clearly warn that the skill will make authenticated network requests that expose course/account metadata to the configured Moodle instance and may surface sensitive educational data in agent outputs or logs. In an agent-skill context, omission of this disclosure matters because users may provide production credentials without understanding the scope of access and data flow.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill instructs users to send a Moodle authentication token and retrieve course and assignment data, but it does not warn that the token is a credential or that the returned data may contain sensitive educational information. This increases the chance of accidental disclosure through shell history, logs, screenshots, or use against an unintended server, especially because a default Moodle URL is silently applied when MOODLE_URL is unset.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.