Security audit
Ai Agent Evaluator
Security checks across malware telemetry and agentic risk
Overview
This appears to be a disclosed ClawHub maintainer and Convex skill bundle with powerful but gated workflows and no scanner-backed security findings.
Install only if you expect ClawHub/Convex maintainer workflows. The moderation, email, and migration skills can affect production accounts, packages, emails, and data when used with valid admin credentials, so keep them limited to trusted staff environments and follow the built-in confirmation and dry-run gates.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.