ClawHub
Back to skill

Security audit

Tmp.DsJv7e0ZVB

Security checks across malware telemetry and agentic risk

Overview

The skill is for managing a Skylight family hub, but its unpinned install path currently exposes many more live-account tools than the submitted skill description discloses.

Review this before installing. Use it only if you are comfortable giving an MCP server your Skylight password and permission to change live family hub data. Prefer a project-scoped config, set SKYLIGHT_FRAME_ID when possible, pin and review the npm package version, and require explicit user confirmation before deletes, bulk changes, uploads, member/account changes, or calendar/source-calendar changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

High
Confidence
95% confidence
Finding
The trigger text includes a broad catch-all condition such as 'any request involving the Skylight frame, family calendar, chores, rewards, or shared lists,' which can cause the skill to activate on loosely related user requests. Because this skill has write and delete capabilities against a real family hub, overbroad activation increases the chance of unintended invocation and unauthorized or accidental modification of calendar, chore, or list data.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The description says the skill can read and manage Skylight data, but it does not clearly warn users that it can create, update, complete, and delete real data in their Skylight account. In a family calendar context, insufficient disclosure raises the risk of users invoking the skill without understanding that it may change shared events, chores, rewards, or lists.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.