Security audit
taskforce-loop-engineering
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed task-loop automation helper that uses an npm CLI and workspace artifacts only for explicitly requested loop workflows.
Install only if you want an agent to manage explicit loop-based tasks and projects. Review the npm package and any OpenClaw install plan first, and pay attention to confirmation prompts for patch application, cleanup, external messages, credentials, production changes, or scheduled execution.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.