ClawHub
Back to skill

Security audit

Tmp.BcPQA7YzJI

Security checks across malware telemetry and agentic risk

Overview

This skill is for a real OFW integration, but it grants broad ongoing access to sensitive co-parenting records and can trigger on generic co-parenting requests.

Install only if you want an agent to have ongoing authenticated access to your OurFamilyWizard records. Use a tightly scoped config, avoid silent background calls, confirm every write or state-changing action, and understand that reading some messages can mark them read in a way the other party may see.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger description is broad enough to activate on generic co-parenting requests such as 'what did my co-parent say' or questions about messages, calendar items, or expenses without explicit intent to access OFW. That can route ordinary conversation into a skill with authenticated read/write access to sensitive legal-family records, increasing the chance of unintended data access or side-effecting actions.

Session Persistence

Medium
Category
Rogue Agent
Content
# ofw-mcp

MCP server for OurFamilyWizard — provides read/write access to messages, calendar, expenses, and journal.

- **npm:** [npmjs.com/package/ofw-mcp](https://www.npmjs.com/package/ofw-mcp)
- **Source:** [github.com/chrischall/ofw-mcp](https://github.com/chrischall/ofw-mcp)
Confidence
82% confidence
Finding
The skill explicitly provides persistent read/write access to highly sensitive OurFamilyWizard data, including messages, calendars, expenses, and journals, and the setup stores long-lived username/password credentials in environment/config files. In this context, session persistence expands the blast radius of mis-triggering, prompt injection, or local compromise because the agent can continue accessing or modifying records without re-authentication.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.