ClawHub
Back to skill

Security audit

Skillsign — ed25519 Skill Signing

Security checks across malware telemetry and agentic risk

Overview

This is a local signing tool, but its trusted-author labels can be misled by editable metadata, so users should review it before relying on it for security.

Use this only as a local utility until the trust-binding issue is fixed. Protect ~/.skillsign private keys, trust public keys only after verifying them independently, and do not treat TRUSTED labels, inspect output, or provenance chains as proof of author identity without additional verification.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding
Without declared permissions the skill's intent is opaque and cannot be validated.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.