ClawHub Web Publisher
Security checks across malware telemetry and agentic risk
Overview
This is a simple publishing helper that tells an agent to upload a chosen skill through ClawHub’s web dashboard while checking for secrets first.
Install this only if you want an agent to help publish skills to ClawHub. Before using it, confirm the browser is signed in to the intended account, verify the exact folder selected for upload, and review the privacy checklist so secrets, private paths, screenshots, or personal details are not published.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.