Dynamic code execution detected.
Critical
- Code
- suspicious.dynamic_code_execution
- Location
- lib/analyzer.py:147
Security audit
Skill Guard Pro
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed local security scanner for ClawHub skills, and the reviewed files match that purpose without hidden persistence or data exfiltration.
Install if you want a lightweight static scanner for skills. Run it only on skill directories or named skills you intend to inspect, treat its SAFE/CAUTION/DANGEROUS labels as advisory, and manually review any flagged network endpoints, credential patterns, or destructive commands before relying on the result.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dynamic_code_execution