ClawHub
Back to skill

Security audit

three-point-lighting

Security checks across malware telemetry and agentic risk

Overview

This skill is a narrow studio-lighting guide with no executable code or hidden data access, though users should apply normal electrical and heat safety when using real lights.

Before installing, understand that this is an educational photography skill, not an equipment safety manual. If following it in a real studio, avoid overloaded circuits, use correctly rated fixtures and modifiers, secure stands and cables, keep hot lights away from flammable materials, and let lamps cool before handling.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill gives actionable instructions for setting up powered studio lighting but lacks prominent user-facing safety guidance about electrical load, heat, burns, cable trip hazards, ventilation, and safe handling. Because users may follow these steps in the physical world, omission of basic operational safety can contribute to injury or equipment damage, especially for novices.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.