ClawHub
Back to skill

Security audit

IBD Companion

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent local health-record tracker, with sensitive local database access that is disclosed and mostly well-scoped.

Install only if you want an agent to maintain a private local IBD database. Keep the database path private, make an access-controlled backup before upgrades or migrations, and do not enable external reminders unless you explicitly approve the channel and timing.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill invokes local shell-accessible scripts and relies on environment variables such as IBD_DB_PATH, OPENCLAW_STATE_DIR, and HOME, but it declares no permissions. That creates an undeclared capability gap: an agent or runtime may execute shell/database operations against sensitive local health data without explicit user-visible authorization boundaries, increasing the risk of unintended access, modification, or exposure of medical records.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The migration drops legacy tables after copying selected data, without any user-facing confirmation, backup enforcement, or rollback path. In a medical recordkeeping skill, silent destructive migrations can permanently remove historical health data or provenance if the migration logic is incomplete or later discovered to be incorrect.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
This migration rewrites the disease_profile schema, copies only mapped fields, then deletes the archived legacy table in the same flow. If unmapped fields, malformed rows, or logic errors exist, the user may irreversibly lose medical-history context, which is especially sensitive in a local-first health application.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.