ClawHub
Back to skill

Security audit

Clean Closed Issue Worktrees

Security checks across malware telemetry and agentic risk

Overview

This skill appears purpose-built to audit and clean old Git worktrees, with explicit confirmation required before deletion.

Install only if you want an agent to inspect local Git worktrees and help remove selected ones. Review the scan output carefully, keep branches by default unless you have a clear reason to delete them, and approve only exact paths whose linked issues or PRs you have verified are complete.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill explicitly instructs the agent to read repository state, use shell commands, access environment-provided temporary paths, and create or delete files, but it does not declare permissions for those capabilities. That mismatch is dangerous because a permissionless-looking skill can be approved or reused under false assumptions, while still performing sensitive filesystem and command execution actions including destructive worktree cleanup.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.