ClawHub
Back to skill

Security audit

WebSculpt: Playwright-CLI with Memory

Security checks across malware telemetry and agentic risk

Overview

The skill is not deceptive, but it defaults to persistent global tool and multi-agent skill installation before continuing into web automation workflows.

Review before installing if you do not want global npm packages or new skills added to Claude, Codex, and Agents home directories. Prefer the documented project-local install for limited scope, and be cautious when using it with logged-in browser sessions or sensitive accounts.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Missing User Warnings

Low
Confidence
88% confidence
Finding
The skill instructs the agent to perform a global npm install and write skill files into user home-directory agent folders without requiring explicit user confirmation at the point of action. Because this changes the filesystem and execution environment persistently, it creates a consent and supply-chain risk: a user asking for information retrieval could unintentionally trigger software installation and modification of agent-controlled directories.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Prohibited

- Do not run any install command before probing (`websculpt --version` / `websculpt skill status`).
- Do not reinstall when the CLI and skills are already healthy, and do not ask the user to restart the session; route and continue the task directly.
- Do not use sudo to work around npm global install permission errors; use the npx fallback instead.
- Do not hand-edit the four installed lifecycle skill files; they are refreshed exclusively via `websculpt skill install --force`.
Confidence
77% confidence
Finding
do not ask the user

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.