Back to skill

Security audit

Clawhub Teaser

Security checks for vulnerabilities and agentic risk

Overview

This is a static teaser skill with disclosed paid external links and no executable behavior or local access.

Before installing, understand that this free skill appears to be a teaser for paid files hosted through Polar. From a security perspective it is low risk, but verify the off-platform purchase links and publisher before paying.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.