ClawHub
Back to skill

Security audit

Study

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed local study planner that keeps course, exam, and revision records on the user's machine.

Before installing, be comfortable with the skill keeping persistent local study records, including grades, missed questions, contacts, project milestones, and exam booking details under ~/Clawic/data/. It says it will not store credentials or send data off-machine, but it may automatically update, move, or clean up its own local notes as part of normal use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The template explicitly authorizes file writes and deletions without user confirmation, which creates a state-changing capability with no human approval gate. In an agent setting, this increases the chance of unintended or prompt-injected modifications to user data, especially because the skill manages persistent memory and shared files.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The split procedure instructs the agent to move content and delete the original section in the same turn, with no backup, rollback, or confirmation step. If the move is performed incorrectly or influenced by malformed input, this can cause silent data loss or corruption of the user's long-term study records.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
memory-template.md:62