ClawHub
Back to skill

Security audit

Prisma

Security checks across malware telemetry and agentic risk

Overview

This Prisma skill is a documentation and workflow assistant with disclosed, purpose-aligned local preference storage and no evidence of hidden or malicious behavior.

Install only if you are comfortable with the skill keeping Prisma-specific preferences and memory under ~/Clawic/data/prisma. Review any generated migration, raw SQL, db push, migrate reset, or --force-reset command before running it, and make sure test reset commands point only at an isolated test database.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
96% confidence
Finding
The setup explicitly instructs the skill to read and later write user-scoped files under ~/Clawic/data/prisma outside the immediate Prisma project artifacts. That creates persistent access to cross-session user data and state mutation that are not necessary for most schema/query help, increasing privacy risk and the chance of unintended data leakage or tampering.

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The skill defines persistent profiling/memory behavior by storing schema domain, hosting topology, recurring pain points, and user preferences across sessions. Even if framed as convenience, this exceeds the narrow need of a Prisma editing assistant and can accumulate sensitive operational context that could later influence responses or expose private environment details.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The setup directs silent reads and writes of user-scoped config and memory files and even says to proceed without comment if files are absent. That lack of user-facing notice or consent undermines transparency and makes covert persistence possible, which is especially risky because the stored content may include hosting, schema, and workflow details.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The document recommends `prisma db push --force-reset` against a test database but does not place an immediate, explicit warning next to the command that it irreversibly drops existing data if `TEST_URL` is misconfigured. In a Prisma skill, this is materially risky because users commonly copy-paste commands, and environment mix-ups can turn a test-only reset into destructive loss of development, staging, or even production data.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.