ClawHub
Back to skill

Security audit

Openclaw Skill

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed paid API-wrapper skill for workplace, rental, resale, and compliance helpers, with privacy and payment cautions but no hidden or destructive behavior found.

Install only if you are comfortable with a remote paid service processing the text you submit. Confirm each paid use, redact unnecessary personal or confidential details from resumes, contracts, disputes, and business drafts, and do not treat its legal or compliance output as professional advice.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill advertises and instructs use of a remote API endpoint and a client script, but does not declare corresponding network permissions. This creates a transparency and governance gap: reviewers and users may not realize data will be transmitted off-platform, and permission-based controls cannot be applied correctly.

Vague Triggers

Medium
Confidence
82% confidence
Finding
The trigger description uses broad phrasing such as keywords 'etc.', which can cause the skill to activate on ambiguous user requests. Over-broad triggering is risky here because the skill can route user content to a paid remote API, potentially sending sensitive resumes, contracts, or compliance text without sufficiently specific user intent.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill does not clearly warn users that their inputs will be transmitted to a third-party remote API service. Given the covered use cases include contracts, resumes, complaints, and compliance content, this omission can expose sensitive personal, professional, or legal text to external processing without informed consent.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.