Security audit
Apify
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Apify integration skill that uses ClawLink for credential-backed API access and includes user-confirmation steps for costly or destructive actions.
Install this only if you trust ClawLink to store and use your Apify API key. Review confirmations carefully for actor runs, writes, and deletes because they can change Apify resources or incur compute costs; revoke the credential in Apify or ClawLink if you stop using it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
54/54 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.