ClawHub
Back to skill

Security audit

server-log-analysis-en

Security checks across malware telemetry and agentic risk

Overview

This skill is for legitimate SSH log troubleshooting, but it includes root password-style SSH configuration and keeps downloaded logs locally by default.

Install only if you replace the example SSH credentials with a least-privileged account and a secure secret source such as SSH keys, environment variables, or a vault. Confirm the target host, service, log files, and time window before use, and delete or protect downloaded logs after troubleshooting.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The skill explicitly instructs copying remote log snippets to a local temp directory, but it does not require user confirmation, data minimization safeguards beyond general guidance, or any warning that logs often contain secrets, tokens, personal data, or internal system details. In an SSH-based troubleshooting context, this creates a real risk of unnecessary local data replication and retention on the agent host, especially if temp storage is less controlled or persists beyond the session.

Missing User Warnings

Medium
Confidence
99% confidence
Finding
The configuration embeds SSH credentials directly in the skill file, including a root username and plaintext password. Hardcoded credentials are dangerous because they can be exposed through source control, logs, backups, or downstream tooling, and in this case they grant privileged remote access to a server used for log retrieval.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.