ClawHub

Falcon

Security checks across malware telemetry and agentic risk

Overview

Falcon is a disclosed Twitter/X helper, but it needs review because it can use a Twitter session cookie to post or change account state through raw Bash commands.

Install only if you trust the publisher and TwexAPI with the Twitter/X account represented by TWITTER_COOKIE. Prefer using it read-only with TWITTER_COOKIE unset unless you intentionally need posting or engagement, and require explicit user confirmation before every public post, follow, like, retweet, bookmark, or deletion-style action.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill exposes shell execution via `command-tool: Bash` and `command-arg-mode: raw` but does not declare any permissions or safety boundaries. Because it performs networked actions against Twitter/X, including state-changing operations like tweeting, liking, following, and retweeting, the lack of explicit permission declarations increases the risk of unintended command execution or unauthorized external side effects.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal