ClawHub

vryfik skill

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed search-helper skill whose main risk is a local 24-hour cache of recent queries and answers.

Install only if you are comfortable with recent search queries and assembled snippets being cached locally for about 24 hours. Avoid using it for secrets, private/internal URLs, credentials, regulated data, or sensitive client material unless you manage or clear ~/.antigravity/search-cache/.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The web_search trigger includes very broad terms such as "why," "compare," and "vs," which are common in ordinary user requests and can cause this skill to activate when no web lookup is actually needed. In an agent system, unintended invocation can misroute queries, increase external browsing, and create unnecessary exposure to live web content or higher-cost operations.

Session Persistence

Medium
Category
Rogue Agent
Content
* Semantic Cache — Vector similarity cache backed by local JSON file
 *
 * ClawHub Security: FILE SYSTEM ONLY.
 * Read/write limited to CACHE_DIR (default: ~/.antigravity/search-cache/).
 * No network access. No eval. No dynamic code.
 *
 * Commands:
Confidence
85% confidence
Finding
write limited to CACHE_DIR (default: ~/.antigravity

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal