Redis

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Redis guidance skill with no code or install steps, but its command examples should only be run against Redis instances you intend to change.

This skill appears safe as an instruction-only Redis reference. Before allowing an agent to apply its examples, make sure it is targeting the intended Redis instance and get confirmation for any command that writes data, changes configuration, snapshots, or runs Lua scripts.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If these examples are run against a real Redis database, they may change cache, queue, or application state.

Why it was flagged

The artifact declares redis-cli as a required binary and provides Redis write/scripting command examples. This is aligned with the skill's Redis purpose, but these commands can modify Redis data or execute Redis Lua scripts if run against a live instance.

Skill content
requires":{"anyBins":["redis-cli"]} ... `SET key value EX 3600` ... `EVAL "script" keys args`
Recommendation

Use explicit Redis targets, test in staging where possible, and require confirmation before write, admin, or EVAL commands on production Redis systems.