ClawHub
Back to skill

Security audit

pr-prep

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed pull request preparation workflow that runs normal repository checks and writes a PR description, with no evidence of hidden data theft or destructive behavior.

Install this if you want an agent-assisted PR preparation checklist. Use it from a clean git state, choose a safe output path for the PR description, and review any formatter or lint fixes before committing because the workflow may change files as part of normal quality-gate remediation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The manifest lists generic triggers such as "git", "pr", and "testing", plus a broad natural-language phrase "completing a feature and ready for review". These overlap with common developer conversation and do not define clear activation boundaries or exclusions, increasing the risk that the skill is invoked in unintended contexts.

Missing User Warnings

Low
Confidence
77% confidence
Finding
The markdown directs the agent to write the final PR description to a specified path, which is a file-modifying operation. The document does not provide a clear warning that the skill will create or overwrite a file, which can affect user workspace contents.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
70% confidence
Finding
Overly Broad Trigger: 'pr' is too short and may match unintended inputs

Direct Prompt Extraction

High
Category
System Prompt Leakage
Content
If the description contains slop, apply `Skill(scribe:doc-generator)` principles to ground claims with specifics, remove marketing language, and use direct statements.

## Output Instructions

Write the final PR description to the specified path, then display the file path and its contents for confirmation.
Confidence
85% confidence
Finding
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.