ClawHub
Back to skill

Security audit

Aura Security Scanner

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims: it sends a user-provided skill URL to AURA's external scanner and returns the result, without local file access, command execution, or persistence.

Install only if you are comfortable sending scanned skill URLs to AURA or whatever endpoint is configured through AURA_API_URL. Avoid submitting private repo links, token-bearing URLs, presigned links, or internal service URLs unless you trust that endpoint, and treat scan verdicts as advisory rather than a guarantee of safety.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill sends user-supplied skill URLs and related scan metadata to `api.aurasecurity.io`, but the user-facing description does not clearly warn that this data is transmitted to a third-party service. This can create privacy and trust issues, especially if users submit private repository URLs, internal endpoints, or sensitive package locations for scanning.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The handler sends a user-supplied skill URL to an external AURA API service for analysis without any explicit user disclosure, consent flow, or in-band warning. Even if only the URL is transmitted, that can leak private repository locations, internal hostnames, or sensitive investigation targets to a third party, which is especially relevant for a security-scanning skill where users may expect local analysis.

Unpinned Dependencies

Low
Category
Supply Chain
Content
},
  "dependencies": {},
  "devDependencies": {
    "typescript": "^5.0.0"
  }
}
Confidence
82% confidence
Finding
The devDependency uses a caret range (^5.0.0), which permits automatic installation of newer minor and patch releases rather than a single verified version. While this is only a development dependency and package.json alone does not prove exploitation, unpinned tooling can introduce supply-chain risk if a compromised or breaking upstream release is pulled during build or test workflows.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.