Mural
Security checks across malware telemetry and agentic risk
Overview
This skill is a clearly disclosed Mural integration that uses ClawLink OAuth to browse boards and create sticky notes with user confirmation.
Before installing, make sure you trust ClawLink to broker OAuth access to your Mural account. The skill is purpose-aligned, but it can read collaboration content available to your account and can add sticky notes when you confirm a write action.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.