Security audit
Skill Publisher
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward publishing checklist for ClawHub skills, with no hidden scripts or unrelated behavior found.
Install this if you want an agent to help publish skills to ClawHub. Review the slug, version, tags, changelog, and target directory before allowing the publish command, because it can update a public ClawHub skill under your account.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
55/55 vendors flagged this skill as clean.