ClawHub
Back to skill

Security audit

Sleep

Security checks across malware telemetry and agentic risk

Overview

This sleep-coaching skill is advisory and coherently scoped, with disclosed local storage for sleep plans, diaries, and preferences.

Install only if you are comfortable with the skill keeping local sleep-coaching files under ~/Clawic/data/sleep/. Review or delete that directory if you do not want past sleep, household, travel, or substance-use context reused later.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to write output to a fixed local filesystem path in the user's home directory, which exceeds a purely advisory sleep-coaching role and introduces an unnecessary side effect. Even though the content is only a trip plan, unauthorized file creation/modification can surprise the user, overwrite existing data, or normalize broader unsafe file-write behavior in future skills.

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
Persisting travel plans to local storage is not necessary for providing sleep coaching and therefore expands the skill's effective capabilities beyond its stated purpose. This capability creep is dangerous because it creates avoidable access to the local environment, increasing the attack surface for data placement, confusion, and abuse by downstream instructions or future modifications.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The markdown tells the agent to modify the local filesystem without any warning, disclosure, or opt-in from the user. In the context of a wellness coaching skill, silent file writes are especially unjustified and can violate user expectations about what the tool is allowed to change on their machine.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The template instructs the agent to create and maintain a persistent local memory file containing sensitive health, household, and substance-use context, but it provides no privacy notice, consent step, retention limit, or minimization guidance. In a sleep-coaching context, this can accumulate intimate personal data such as insomnia status, medications, partner/kids routines, and room situation, increasing privacy and misuse risk if stored automatically or accessed by other tools.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.