ClawHub
Back to skill

Security audit

Audit Trail

Security checks across malware telemetry and agentic risk

Overview

This is a local audit logger, but it overstates its immutability and may retain sensitive agent activity in mutable files.

Install only if you treat this as a best-effort local audit log, not a compliance-grade immutable record. Avoid logging secrets, private messages, memory contents, or configuration values unless you have reviewed the redaction behavior and added stronger file permissions, retention controls, and external integrity protection.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Description-Behavior Mismatch

Medium
Confidence
95% confidence
Finding
The skill markets the audit trail as "immutable," but it stores records in ordinary local files that can be modified, deleted, truncated, or replaced by any process with filesystem access. Writing additional mutable artifacts such as reports and integrity-check files into the same directory further undermines the immutability claim and can mislead operators into overtrusting the log for forensic or compliance purposes.

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
Hash chaining over mutable files provides tamper evidence only if the attacker cannot rewrite history and recompute the chain, but this implementation has no keyed signature, remote anchoring, or append-only enforcement. In a governance/compliance skill, overstating this as immutable is dangerous because investigators may rely on evidence that an attacker with local write access could alter.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.