Security audit
Security checks for vulnerabilities and agentic risk
This skill is a plain guidance checklist for removing personal information from data broker sites, with no bundled code, hidden persistence, or deceptive behavior found.
Before installing, understand that using this skill may involve searching for and submitting your own personal information to data broker opt-out forms, sometimes with email or phone verification. Avoid saving sensitive details in files unless necessary, and treat the unpinned npx install path as normal package-install risk rather than a finding of malicious behavior.
The install command uses npx clawhub without a pinned version, which means future executions may fetch whatever package version is current at install time. If the package is compromised, typo-squatted, or a malicious update is published, users could execute unreviewed code during installation.
The 'When to Use' section lists very broad conditions such as wanting to remove personal information, reduce spam, or reduce a digital footprint. These descriptions do not clearly distinguish when this skill should be invoked versus other privacy or safety skills, and they provide no negative examples or scope constraints.
No suspicious patterns detected.
