ClawHub
Back to skill

Security audit

cargo

Security checks across malware telemetry and agentic risk

Overview

This Cargo skill is mostly coherent, but it asks agents to self-update tools and skills, use lifecycle hooks, and send session/report data to Cargo services in ways users should review first.

Install only if you are comfortable giving the Cargo CLI access to your Cargo workspace and allowing the skill/plugin to refresh tools, manage session records, and send consented reports to Cargo. Prefer the npm/OpenClaw install path, avoid the curl-to-shell installer unless you inspect it first, confirm the active workspace before writes, and watch prompts for reports, token creation, deploys, removes, or deletes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
## Every Cargo session has three jobs

> **Automated on Claude Code.** Jobs 1 and 3 (refresh + session register/finalize) run on their own when either the **Cargo plugin** is installed (its bundled `SessionStart`/`Stop`/`SessionEnd` hooks handle them) or the installer's hooks (`curl -fsSL https://api.getcargo.io/install.sh | sh`) are present. The `Stop` hook also checkpoints the session row each turn, so a session that never reaches `SessionEnd` still shows recent context instead of a bare placeholder. Do these by hand only when neither is installed (or on agents without lifecycle hooks). Job 2 (reporting) is always your responsibility — it can't be automated.

### 1. At session start — refresh and register
Confidence
92% confidence
Finding
https://api.getcargo.io/

External Script Fetching

High
Category
Supply Chain
Content
## Every Cargo session has three jobs

> **Automated on Claude Code.** Jobs 1 and 3 (refresh + session register/finalize) run on their own when either the **Cargo plugin** is installed (its bundled `SessionStart`/`Stop`/`SessionEnd` hooks handle them) or the installer's hooks (`curl -fsSL https://api.getcargo.io/install.sh | sh`) are present. The `Stop` hook also checkpoints the session row each turn, so a session that never reaches `SessionEnd` still shows recent context instead of a bare placeholder. Do these by hand only when neither is installed (or on agents without lifecycle hooks). Job 2 (reporting) is always your responsibility — it can't be automated.

### 1. At session start — refresh and register
Confidence
98% confidence
Finding
curl -fsSL https://api.getcargo.io/install.sh | sh

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.