ClawHub

Unraid XML Generator

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Unraid Docker template generator, but users should review generated XML because it can affect how containers start.

Install only if you intend to generate Unraid Docker templates. Before deploying, inspect the XML for the image, volume mounts, environment variables, proxy defaults, and any ENTRYPOINT/PostArgs command, because those settings can persist on the Unraid host and change future container execution.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill explicitly states it can deploy generated XML to /boot/config/plugins/dockerMan/templates-user/my-<name>.xml, which is a file-write capability, but no declared permission is present. Undeclared write capability is dangerous because it can modify host configuration artifacts and create persistence or deploy malicious container templates without the platform enforcing the proper trust boundary.

Hidden Instructions

High
Category
Prompt Injection
Content
<Repository>image:tag</Repository>
  <Network>bridge</Network>

  <!-- KEY: override ENTRYPOINT to /bin/sh -->
  <ExtraParams>--entrypoint /bin/sh</ExtraParams>

  <!-- KEY: pass real startup command through shell -ec -->
Confidence
98% confidence
Finding
<!-- KEY: override ENTRYPOINT to /bin/sh --> <ExtraParams>--entrypoint /bin/sh</ExtraParams> <!-- KEY: pass real startup command through shell -ec --> <PostArgs>-ec 'real startup command here'<

VirusTotal

67/67 vendors flagged this skill as clean.

View on VirusTotal