Security audit
Projects
Security checks across malware telemetry and agentic risk
Overview
This skill is a local project-planning helper that creates and updates project note files, with no executable code or network behavior found.
Before installing, expect this skill to create and maintain plain local project notes under ~/Clawic/data/projects/. It may store project details such as deadlines, collaborators, client contact information, rates, and billing notes if you ask it to, so avoid putting sensitive information there unless you are comfortable keeping it in local files.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.