ClawHub
Back to skill

Security audit

cargo-cdk

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Cargo workspace-as-code guide whose powerful deploy and destroy commands match its stated purpose, with caution needed around destructive operations and CI tokens.

Install only if you intend to manage Cargo resources as code. Before deploy, prune, or destroy, run a plan, confirm the selected workspace, protect CI/API tokens as secrets, and treat destroy --all as deleting all state-managed resources in that workspace.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The recipe documents `cargo-ai cdk destroy --all` as part of normal iteration flow without an explicit warning, confirmation guidance, or emphasis on irreversible deletion of deployed workspace resources. In an automation/infra-as-code context, readers may copy commands directly, so presenting a bulk-destroy command without safeguards increases the risk of accidental destructive actions against real staging or production environments.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.prompt_injection_instructions

Prompt-injection style instruction pattern detected.

Warn
Code
suspicious.prompt_injection_instructions
Location
guides/authoring-resources.md:123

Prompt-injection style instruction pattern detected.

Warn
Code
suspicious.prompt_injection_instructions
Location
recipes/build-an-agent.md:65

Prompt-injection style instruction pattern detected.

Warn
Code
suspicious.prompt_injection_instructions
Location
references/examples/full-workspace.md:69