ClawHub
Back to skill

Security audit

PR & Changelog Generator

Security checks across malware telemetry and agentic risk

Overview

This skill generates PR descriptions, changelogs, and release notes from git history, with no executable code or hidden installation behavior found.

Install only if you are comfortable with the agent reading and summarizing the current repository's git history and diffs when you ask for PR or release documentation. Be explicit about the branch or commit range to avoid accidental broad summaries.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger keywords are broad enough to match routine developer conversations such as 'pull request', 'changelog', 'git log', and 'commit message', which can cause the skill to activate outside the user's actual intent. In an agent environment, overbroad activation increases the chance the model pulls git context or starts summarization on unrelated prompts, expanding data exposure and creating confusing or privacy-impacting behavior.

Vague Triggers

Medium
Confidence
89% confidence
Finding
The activation guidance is ambiguous because it says to activate when the user mentions broad topics like pull requests, changelogs, semantic versioning, or asks 'what changed', without clear limits or confirmation requirements. That makes accidental invocation more likely, which is risky here because the skill's workflow explicitly gathers git history, diffs, changed files, and existing documentation that may contain sensitive internal information.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.