ClawHub
Back to skill

Security audit

Skill Creator

Security checks across malware telemetry and agentic risk

Overview

This is a coherent skill-authoring helper that creates and packages local skill files, with no evidence of hidden data access, network use, persistence, or deception.

Install this if you want an agent to help create OpenClaw skills. Use a dedicated target directory, review generated scripts and SKILL.md before installing or sharing the new skill, and inspect the packaged .skill archive so private notes, credentials, build outputs, or unrelated files are not included.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
78% confidence
Finding
The skill instructs the agent to create, edit, validate, and package skills by running local scripts and modifying files, which implies file read/write and shell execution capabilities. If the platform relies on declared permissions for user awareness or enforcement, omitting them creates a capability/expectation mismatch that can lead to unsafe execution in broader contexts.

Vague Triggers

Medium
Confidence
72% confidence
Finding
The description is broad enough to trigger on many requests about creating or updating skills, causing this skill to activate in contexts where code generation, file modification, or packaging behavior may not be appropriate. Over-broad triggering increases the chance of unintended tool use and accidental self-modification workflows.

Self-Modification

High
Category
Rogue Agent
Content
1. Understand the skill with concrete examples
2. Plan reusable skill contents (scripts, references, assets)
3. Initialize the skill (run init_skill.py)
4. Edit the skill (implement resources and write SKILL.md)
5. Package the skill (run package_skill.py)
6. Iterate based on real usage
Confidence
89% confidence
Finding
write SKILL

Self-Modification

High
Category
Rogue Agent
Content
Any example files and directories not needed for the skill should be deleted. The initialization script creates example files in `scripts/`, `references/`, and `assets/` to demonstrate structure, but most skills won't need all of them.

#### Update SKILL.md

**Writing Guidelines:** Always use imperative/infinitive form.
Confidence
90% confidence
Finding
Update SKILL

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.