ClawHub
Back to skill

Security audit

aws-SkyRoute

Security checks across malware telemetry and agentic risk

Overview

The skill appears to include an AWS monitoring-style page that may display simulated health data as if it were live operational telemetry.

Review before installing or using this skill in any operational setting. It should be treated as a visual demo unless the publisher clearly labels the dashboard as simulated or wires it to real AWS observability data with transparent data-source provenance.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Description-Behavior Mismatch

High
Confidence
99% confidence
Finding
The page presents itself as a live AWS global traffic monitor, but all telemetry is generated from hard-coded values and randomized simulation logic rather than real backend data. In an operations or incident-response context, this can mislead users into making decisions based on fabricated health metrics, masking real outages or creating false alarms.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.