ClawHub

Inspiration

Security checks across malware telemetry and agentic risk

Overview

This markdown-only skill curates design and AI image reference websites and does not ask for credentials, code execution, or privileged access.

Reasonable to install for design and AI-art inspiration. Be aware that linked third-party sites may track visits, require accounts or paid plans, and some AI galleries may contain mature imagery; use site filters where appropriate and avoid putting sensitive information in the optional preferences file.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Low
Confidence
91% confidence
Finding
This markdown file explicitly points users to Civitai and notes filtering by NSFW level, which signals possible exposure to adult content. Because the document provides no warning or disclosure about encountering sensitive material, it lacks a user-facing caution relevant to privacy and safety expectations.

Direct Prompt Extraction

High
Category
System Prompt Leakage
Content
3. Adapt the prompt elements you like

**From URL:**
1. Most galleries show prompts
2. Civitai always includes generation data
3. Midjourney Showcase links to Discord with prompts
Confidence
85% confidence
Finding
show prompt

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal