Security audit
Pipeworx lorem
Security checks across malware telemetry and agentic risk
Overview
The inspected skill artifacts are coherent developer and ClawHub operations helpers, with powerful but disclosed commands that require user-directed use.
Install only if you intend to use these ClawHub/Convex maintainer workflows. Be careful with authenticated GitHub, Convex, and ClawHub moderation sessions, review commands before approving writes, and use the documented dry-run or no-yolo options when you want less privileged execution.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.