Risk Assessment
Security checks across malware telemetry and agentic risk
Overview
The skill artifacts are coherent workflow guidance for ClawHub and Convex development, with sensitive actions disclosed and generally scoped to user-directed commands.
Install only if you are comfortable giving the agent ClawHub/Convex maintainer workflow authority. Pay particular attention before using moderation commands, GitHub publishing, or the autoreview helper's default full-access review mode; use available dry-run, confirmation, and no-yolo options when appropriate.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.