ClawHub
Back to skill

Security audit

friction-detector

Security checks across malware telemetry and agentic risk

Overview

This skill locally analyzes agent-session friction and stores local learning logs; the privacy-sensitive persistence is disclosed and aligned with its stated purpose.

Install only if you are comfortable with local records of session friction being written under ~/.claude and with recurring patterns being added to LEARNINGS.md. Review or delete those local files if session history may contain sensitive work details.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill explicitly instructs writing persistent data to ~/.claude/friction/sessions and ~/.claude/friction/index.json, and earlier also contemplates appending to LEARNINGS.md, without a prominent warning that it modifies local persistent state. This can surprise users, create unintended retention of interaction data, and lead to privacy or integrity issues if enabled by default or invoked automatically.

Ssd 3

Medium
Confidence
92% confidence
Finding
The skill states it consumes session transcripts, hook data, and performance tracker data, while also describing cross-session storage in friction logs and LEARNINGS.md. Persistently collecting and correlating user interaction data across sessions increases privacy risk, may capture sensitive prompts or behavior patterns, and expands the blast radius if local files are later exposed.

Session Persistence

Medium
Category
Rogue Agent
Content
### Step 5: Store Results

Write session log to
`~/.claude/friction/sessions/{date}-{session_id}.json`
and update `~/.claude/friction/index.json`.
Confidence
90% confidence
Finding
Write session log to `~/.claude/friction/sessions/{date}-{session_id}.json` and update `~/.claude

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.