Claw Chat

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:24 PM UTC
• Version:
  1.0.1

Overview

This is an instruction-only Claw Chat assistant, with no code or install behavior, but users should notice it may process chat content and its activation phrases are broad.

Install only if you want a Claw Chat-focused messaging assistant. Review any generated replies, summaries, reminders, or tags before using them, and avoid giving it chat content you do not want processed by the assistant.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger list includes broad generic phrases such as "chat assistant," "message summary," and "smart reply" that are likely to match many ordinary requests unrelated to Claw Chat. This can cause unintended skill invocation, routing users into the wrong tool context and potentially exposing conversation content or causing actions to be suggested in an unintended application domain.

VirusTotal

62/62 vendors flagged this skill as clean.