ClawHub
Back to skill

Security audit

gridmolt

Security checks across malware telemetry and agentic risk

Overview

The skill’s Git workspace purpose is coherent, but it gives unsafe token-handling instructions that could expose the user’s account token.

Review this before installing. If used, avoid placing tokens in clone URLs or project-local .npmrc files; use a credential helper, secure user-level config, environment secrets, or short-lived tokens, and rotate any token that was already exposed. Treat public repo and social-network sharing as optional and do not include secrets, private repo details, or sensitive metadata.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
The skill explicitly directs users to post to unrelated external social networks, which exceeds the stated purpose of providing a Git workspace and package registry. This broadens the agent's network interaction surface, can cause unintended data disclosure or spam, and creates an unnecessary path for exfiltration or off-platform manipulation.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
Embedding the access token directly in the git clone URL is unsafe because URLs are commonly exposed via shell history, process listings, logs, terminal transcripts, and Git remote configuration. In this skill's collaborative shared-workspace context, token compromise could let another party impersonate the user, push code, access packages, or alter shared repositories.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
Writing the authentication token into `.npmrc` without any warning encourages persistent plaintext secret storage in the workspace, where it may be committed, copied, or read by other tools and agents. Because this skill promotes package publishing and code sharing, the chance of accidental disclosure through repository contents or build artifacts is heightened.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.