ClawHub
Back to skill

Security audit

test-updates

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent test-maintenance helper with expected test editing and validation behavior, and I found no hidden credential access, persistence, or exfiltration.

Install this only where you are comfortable with a skill that may inspect code, modify or create test files, and run test tooling. Use a clean git state or disposable branch before mutation testing or broad test generation, and separately vet the referenced external Night Market plugin if you install it for the full experience.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger list includes broad, generic terms such as "testing," "tdd," "bdd," and "pytest," which can cause the skill to auto-activate in contexts where the user did not explicitly request test generation or modification. In this skill’s context, unintended invocation is meaningful because the skill is designed to update, generate, and validate tests, so accidental activation could lead to unnecessary file modifications or workflow disruption.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The quick-start and usage sections instruct the agent to run the skill and scripts but do not clearly warn that the skill may create, overwrite, or modify test files. Because this skill’s primary function includes generating and updating tests, the absence of an explicit modification warning increases the risk of surprising file changes, accidental churn, or unsafe automated edits in repositories.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The module explicitly instructs dynamic validation by invoking pytest and mutation testing routines that modify source files, but it provides no warning, consent step, or safety constraints around executing untrusted tests or temporarily altering code. In an agent skill, this is dangerous because tests and repository hooks can execute arbitrary code, and mutation workflows can damage workspace state or produce unintended side effects if restoration fails.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.