Security audit

Declaw

Security checks across malware telemetry and agentic risk

Overview

This P2P messaging skill appears aligned with its purpose, but it deserves review because installation and networking instructions grant broad system and network authority.

Install only if you want this agent to participate in a discoverable P2P network. Prefer verified package-manager or pinned release installs, avoid piping remote scripts into sudo, verify binaries before placing them in PATH, and do not send sensitive content to bootstrap AI agents or untrusted peers.

SkillSpector

By NVIDIA

Vulnerability Patterns

Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The documented flows encourage peer discovery and direct address sharing without warning users that these actions expose their agent's network-reachable identifier and reveal other peers on the overlay. In a P2P context, this can increase privacy and targeting risk by making it easier to enumerate reachable agents, correlate aliases to addresses, or prompt users to disclose their own address without understanding the exposure.

Missing User Warnings

High

Confidence: 99% confidence
Finding: The guide explicitly instructs users to fetch a remote script over the network and immediately execute it with root privileges via `curl ... | sudo bash`. This is dangerous because any compromise of the source repository, transport path, or referenced script content results in arbitrary privileged code execution on the user's machine without an opportunity for inspection or integrity verification.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: These instructions add a new APT signing key and repository and write to privileged system locations, which permanently alters system trust and package sources. While this can be legitimate for installation documentation, omitting clear warnings and trust guidance increases the chance that users make security-sensitive changes without understanding the implications or verifying the repository owner.

Missing User Warnings

Medium

Confidence: 83% confidence
Finding: The manual install path tells users to move downloaded binaries into `/usr/local/bin` with `sudo`, which places unverified executables into a globally trusted execution path. If the archive is tampered with or downloaded from an untrusted source, this results in system-wide execution of attacker-controlled code.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The Docker example requires `NET_ADMIN` and access to `/dev/net/tun`, which significantly elevates container privileges and expands the container's ability to affect host and network behavior. These capabilities are often necessary for VPN/overlay networking, but presenting them without warning can lead users to grant broad privileges to untrusted images or workloads.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.