ClawHub
Back to skill

Security audit

Auto Updater

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be an updater, but it can automatically change Clawdbot and all installed skills on a schedule without clear per-run user approval.

Install only if you intentionally want unattended maintenance of Clawdbot and installed skills. Prefer enabling it after adding an allowlist, backups, rollback instructions, version pinning or trusted channels, and a review/approval step before applying updates.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly automates software and skill updates on a daily cron schedule, but it does not prominently warn users that this will modify installed code without per-run confirmation. Automatic updates expand the trust boundary to every future upstream release, so a compromised registry, malicious update, or simply a breaking release could be applied unattended and affect the bot environment.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The guide instructs an agent to perform unattended package updates, run migrations (`clawdbot doctor --yes`), and modify installed skills on a schedule without any approval gate, rollback guidance, or warnings about service disruption. This creates real operational and security risk because automated updates can introduce breaking changes or pull compromised upstream releases, especially when combined with automatic execution via cron.

Self-Modification

High
Category
Rogue Agent
Content
# Capture new version
CLAWDBOT_VERSION_AFTER=$(clawdbot --version 2>/dev/null || echo "unknown")

# Update skills
log "Updating skills via ClawdHub..."
SKILL_OUTPUT=$(clawdhub update --all 2>&1) || true
echo "$SKILL_OUTPUT" >> "$LOG_FILE"
Confidence
97% confidence
Finding
Update skill

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.