ClawHub
Back to skill

Security audit

soft-ip-full-lifecycle-zijian

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed paid software-copyright review workflow that stores a local order record and does not show hidden networking, exfiltration, or destructive behavior.

Before installing, understand that the skill writes a local order file containing your question and payment-related fields. Keep the initial question minimal if it could include source code, applicant details, or confidential business information, and remove old order files if you do not want them retained locally.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Session Persistence

Medium
Category
Rogue Agent
Content
if __name__ == "__main__":
    parser = argparse.ArgumentParser(
        description="Create order for soft-ip-zijian compliance review service"
    )
    parser.add_argument("question", help="User question / consultation content")
    args = parser.parse_args()
Confidence
87% confidence
Finding
The script stores the raw user-supplied question in a persistent JSON file under the user's home directory. In this skill context, the question may include copyright application details, source-code descriptions, rights attribution facts, or other sensitive business information, so local persistence increases privacy and data exposure risk if the host is multi-user, backed up, or later compromised.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.