Security audit
Mycelium
Security checks across malware telemetry and agentic risk
Overview
This appears to be a legitimate ClawHub developer and staff-maintenance skill collection with powerful but disclosed admin and review workflows.
Install only if you are comfortable giving the agent ClawHub developer or staff-maintenance workflows. Use the moderation, email, migration, and autoreview commands only with the intended accounts, review exact commands before approving writes, and avoid sending private code or secrets to external reviewer engines unless that is acceptable for your project.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.