ClawHub
Back to skill

Security audit

Tmp.SNw4aDqSlE

Security checks across malware telemetry and agentic risk

Overview

This skill is a transparent curl guide for reading a user's Canvas LMS data, with a credential-handling caveat but no hidden install, persistence, or destructive behavior.

Install only if you are comfortable giving your agent shell-level access to Canvas data reachable by your token. Prefer a personal access token or a trusted secrets manager, avoid pasting long-lived refresh tokens or client secrets into shared terminals, logs, or scripts, and review the npx helper before using the QR-login flow with eval.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill instructs users to export OAuth client credentials and a long-lived refresh token into shell environment variables using `eval` on command output, but it does not warn about shell history, process environment leakage, terminal logging, or the risks of handling secrets this way. In a security-sensitive context, this can expose Canvas credentials to other local users, logs, CI systems, or accidental copy/paste reuse, especially because refresh tokens are reusable and longer-lived than access tokens.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.