Security audit
K-Factor and Viral Coefficient
Security checks across malware telemetry and agentic risk
Overview
The skill artifacts are coherent workflow guidance for ClawHub, Convex, documentation, and code review tasks, with sensitive actions disclosed and gated by user confirmation or existing authentication.
Install only if you want these repository workflow skills. ClawHub staff/admin skills can perform real moderation, email, and production maintenance actions when used with appropriate credentials, so review commands before approving them. The autoreview helper may send code-change bundles to selected AI review providers; avoid running it on secrets or private changes unless that is acceptable for your environment.
SkillSpector
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.