Security audit
Higgsfield Product Photoshoot
Security checks across malware telemetry and agentic risk
Overview
The reviewed skill artifacts are coherent maintenance and Convex workflow guidance with disclosed command use and no evidence of hidden collection, persistence, or deceptive behavior.
Use this only in repositories and service accounts where ClawHub/Convex maintenance actions are intended. Review commands before running them, especially staff moderation commands and the autoreview helper's default full-access nested review mode, and keep production credentials scoped to the task.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.