Mosaicml
Security checks across malware telemetry and agentic risk
Overview
The artifacts describe ClawHub development and staff workflow skills with powerful but disclosed, purpose-aligned commands rather than hidden or deceptive behavior.
Install only if you are working on ClawHub maintainer or Convex development tasks. Review the moderation and autoreview commands before use, keep credentials scoped, prefer dry runs where offered, and be especially careful with full-access review mode and any staff action that changes users, roles, public listings, or PR comments.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.