ClawHub
Back to skill

Security audit

gopass

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward gopass password-manager skill, but it needs careful use because it can reveal, change, sync, or delete secrets.

Install only if you want an agent to help operate your gopass store. Require explicit confirmation before revealing, copying, overwriting, deleting, recursively deleting, changing recipients, or syncing secrets; avoid clipboard use on untrusted systems; verify Git remotes and access controls before syncing; and avoid auto-confirm or warning-suppression flags unless the exact action and scope are already approved.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly documents commands that reveal full secrets, output passwords in plaintext, and copy secrets to the clipboard without any caution about exposure to shell history, logs, screen capture, clipboard monitors, or accidental disclosure. In a secret-management skill, these actions are sometimes necessary, but presenting them as routine usage without guardrails increases the chance that an agent or user will exfiltrate credentials unintentionally.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The documented `gopass rm` and especially recursive `gopass rm -r` commands are destructive and are shown without caution about permanence, scope validation, or confirmation expectations. In an agent context, this raises the risk of accidental deletion of secrets or folders, which can disrupt access and potentially propagate via synced stores.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The non-interactive guidance recommends suppressing warnings, notifications, and confirmations, which reduces friction but also removes safeguards designed to prevent accidental disclosure or destructive actions. In a secrets-management skill, telling an agent to use warning-suppression and auto-confirmation flags without strict conditions materially increases the risk of silent secret exposure, unintended overwrites, or destructive operations proceeding without user awareness.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- Use `gopass show -o path` for machine-readable password-only output
- Use `gopass show -f path` to suppress warnings
- Set `GOPASS_NO_NOTIFY=true` to suppress desktop notifications
- Use `gopass --yes` to auto-confirm prompts
Confidence
88% confidence
Finding
auto-confirm

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.