ClawHub
Back to skill

Security audit

Github Operations

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed GitHub management tool that uses a GitHub token to perform user-directed repository, branch, PR, and issue operations.

Install only if you are comfortable giving the skill a GitHub token with repository, PR, and issue permissions. Prefer a fine-scoped token, avoid granting delete privileges unless needed, and review destructive commands carefully before confirming them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Known Vulnerable Dependency: python-dotenv==1.0.1 — 2 advisory(ies): CVE-2026-28684 (python-dotenv: Symlink following in set_key allows arbitrary file overwrite via ); CVE-2026-28684 (python-dotenv reads key-value pairs from a .env file and can set them as environ)

Medium
Category
Supply Chain
Confidence
91% confidence
Finding
The dependency is pinned to python-dotenv 1.0.1, which is reported as affected by a symlink-following/arbitrary file overwrite issue in set_key. In a skill that may manipulate repositories and local workspace files, a vulnerable dotenv library increases the risk that crafted .env paths or symlinks could cause unintended modification of sensitive files if this API is used anywhere in the broader skill implementation.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.