ClawHub
Back to skill

Security audit

secrets-inject

Security checks across malware telemetry and agentic risk

Overview

This skill intentionally exposes stored secrets for user-supplied commands, but it is clearly labeled, opt-in, local, and does not secretly transmit or run anything itself.

Install only if you specifically need to pass secrets into shell commands. Treat generated temp scripts and stdout output as plaintext secret exposure, avoid shared or CI hosts, and run --cleanup-tmp after use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
node skills/secrets-manager/secrets-manager.js --store api_key sk-abc123

# 2) Inject into a command → writes a temp script, prints its path
node skills/secrets-inject/secrets-inject.js --inject "curl -H 'Authorization: Bearer {{api_key}}' https://api.example.com/v1"
# Output: [secrets-inject] ✅ Injected 1 secret(s) into: /tmp/secrets-inject-12345-1.sh
#         [secrets-inject]    Run with:  sh /tmp/secrets-inject-12345-1.sh
Confidence
90% confidence
Finding
https://api.example.com/

Credential Access

High
Category
Privilege Escalation
Content
})();

const DATA_DIR = path.join(WORKSPACE, 'memory', 'secrets');
const SECRETS_FILE = path.join(DATA_DIR, 'secrets.json');
const MASTER_KEY_FILE = path.join(DATA_DIR, '.master-key');
const TMP_INJECTIONS_FILE = path.join(DATA_DIR, '.tmp-injections.json');
Confidence
98% confidence
Finding
secrets.json

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.