ClawHub
Back to skill

Security audit

DevOps

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed DevOps helper that keeps local operational notes and avoids storing secrets, with local write/delete behavior users should understand before installing.

Install only if you want the agent to maintain DevOps memory files under the listed ~/Clawic paths. Keep backups if those notes are important, and do not paste secret values expecting them to be stored; the skill is designed to save pointers instead of credentials.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The template explicitly authorizes writes without permission and allows deletions inside configured paths, which can lead an agent to modify user data without an explicit, contemporaneous warning or confirmation. In a DevOps skill, that is risky because the stored files influence operational decisions and accidental mutation or deletion can corrupt records, runbooks, or release history.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The split procedure instructs the agent to delete the original section from memory.md in the same turn after moving content, but provides no verification, backup, or user confirmation step. That creates a realistic risk of irreversible data loss if the move is partial, malformed, or the destination write fails.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.