Networking Optimizer

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill is coherent with its stated purpose and uses user-provided, read-only GCP billing and networking data without asking for credentials.

Before using this skill, review any bq or gcloud commands you run, limit exported data to the relevant projects and time periods, and remove secrets or unrelated sensitive details from pasted outputs.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Info
What this means

A user may run GCP CLI or BigQuery commands to gather data, so they should review the commands and target project/dataset before running them.

Why it was flagged

The skill declares bash in its frontmatter and provides shell command examples, but the body frames them as user-provided data collection steps rather than automatic execution.

Skill content
tools: claude, bash
Recommendation

Run the examples only in the intended GCP project, verify the billing export table name and date range, and avoid pasting unrelated command output.

#
ASI03: Identity and Privilege Abuse
Low
What this means

These roles can expose billing and infrastructure details, though the requested permissions are read-only and fit the stated optimization purpose.

Why it was flagged

The skill tells the user which read-only GCP permissions are needed to collect billing and networking data for analysis.

Skill content
"roles": ["roles/compute.networkViewer", "roles/billing.viewer", "roles/bigquery.jobUser"]
Recommendation

Use least-privilege, temporary read-only access where possible, and provide only the exported data needed for the analysis.