ClawHub

coda.io

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Coda.io reading tool with expected token-based access and no evidence of hidden or harmful behavior.

Install only if you are comfortable giving this CLI a Coda API token and letting the agent read Coda documents you request. Use the least-privileged token available, avoid exporting sensitive pages unnecessarily, delete the temporary .env file after authentication, never commit it, and use coda-ai logout when you want to remove stored credentials.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill is explicitly designed to enumerate documents, list pages, and export page contents from a remote Coda workspace, but it does not warn users that running these commands will transmit requests to Coda and may expose sensitive organizational data to the agent or downstream systems handling the output. In an agent context, this increases the chance of over-collection and unintended disclosure of private workspace content, especially when markdown/json/html exports are consumed automatically.

Credential Access

High
Category
Privilege Escalation
Content
npm install -g coda-ai@0.2.2

# Auth (Coda API token)
echo "CODA_API_TOKEN=YOUR_TOKEN" > .env
coda-ai auth --from-file .env

coda-ai whoami # verify auth
Confidence
91% confidence
Finding
.env

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal