ClawHub
Back to skill

Security audit

Brainstorming

Security checks across malware telemetry and agentic risk

Overview

This skill is a design-first brainstorming workflow that is broad and somewhat heavy-handed, but its repo reads, spec writing, and git commit instructions are disclosed and aligned with its purpose.

Install this if you want a strict design-first workflow. Be aware it may interrupt simple coding requests, inspect project context, and create committed spec files before implementation planning.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger text says the skill 'MUST' be used before any creative work, with examples broad enough to cover many ordinary requests. This can cause the agent to invoke the skill unnecessarily, creating a workflow bottleneck and potentially overriding more appropriate task-specific handling for simple or unrelated user requests.

Session Persistence

Medium
Category
Rogue Agent
Content
## Checklist

You MUST create a task for each of these items and complete them in order:

1. **Explore project context** — check files, docs, recent commits
2. **Offer the visual companion just-in-time** — NOT upfront. The first time a question would genuinely be clearer shown than described, offer it then (its own message); on approval its browser tab opens for you. If no visual question ever arises, never offer it. See the Visual Companion section below.
Confidence
78% confidence
Finding
create a task for

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.