ClawHub
Back to skill

Security audit

Logfile Analyzer

Security checks across malware telemetry and agentic risk

Overview

This is a local log-analysis skill that reads user-selected log files and produces summaries, with normal caution because logs can contain sensitive data.

Install if you want a local tool for summarizing application logs. Use specific files or directories rather than broad system paths unless needed, and remember that log output may expose tokens, user data, internal URLs, or other operational details.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger list includes broad phrases like 'check logs', 'what's failing', and 'incident analysis', which can match generic troubleshooting requests and invoke the skill outside a clearly log-scoped context. Over-broad activation increases the chance that unrelated or sensitive user content is routed into log-analysis workflows, causing unintended file access, misleading conclusions, or inappropriate handling of operational data.

VirusTotal

67/67 vendors flagged this skill as clean.

View on VirusTotal