Security audit
Od Tool
Security checks across malware telemetry and agentic risk
Overview
The skill set is coherent and purpose-aligned, but users should understand that some workflows can run privileged local tools, publish PR proof, or perform staff moderation actions when explicitly invoked.
Install only if you want these ClawHub and Convex operational workflows. Review commands before approving writes, use the autoreview helper's no-yolo option if you do not want full-access nested review, and be aware that fallback review tools may receive generated diffs.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.