ClawHub

AI Rebirth

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says, but it can reveal prior local chat sessions that may contain sensitive information without built-in warnings or redaction.

Install only if you are comfortable letting the agent read and display previous CodeBuddy session history from this machine. Prefer summary mode, avoid full transcript mode unless you have reviewed the session, and do not use it on sessions that may contain credentials, tokens, private code, or personal data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill is designed to load prior CodeBuddy session history from local files, which can contain sensitive prompts, secrets, proprietary code, or personal data. Without an explicit user warning and consent-oriented guidance, users may expose prior-session contents into the current context unintentionally, increasing privacy and data-leakage risk.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
This script loads prior CodeBuddy session transcripts from disk and prints summaries, tails, or full conversations directly to stdout with no warning, confirmation, or redaction. Because session histories can contain secrets, credentials, proprietary code, or sensitive prompts, invoking this skill can unintentionally disclose private data to the current session, logs, terminals, or downstream tools.

Session Persistence

Medium
Category
Rogue Agent
Content
name: ai-rebirth
description: "AI Rebirth - Load conversation history from a previous CodeBuddy session into the current session. Use when the user wants to resume, reference, or continue a previous session's work. Supports session ID lookup, project-based listing, summary and full output modes."
description_zh: "AI 重生 - 加载历史 Session 对话，延续前世记忆"
description_en: "AI Rebirth - Load previous session history into current session"
version: 1.0.0
allowed-tools: Read,Bash,Grep
---
Confidence
89% confidence
Finding
Load previous session

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal