Quizlet
Security checks across malware telemetry and agentic risk
Overview
The artifacts look like disclosed ClawHub maintenance skills, with no evidence of hidden data theft, persistence, or destructive behavior.
Install only if you intend to use ClawHub repo maintenance workflows. Review the high-impact paths before running them, especially moderation commands, PR proof publishing, package install/setup steps, and the autoreview helper's default full-access mode.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.