ClawHub
Back to skill

Security audit

Proton Pass CLI

Security checks across malware telemetry and agentic risk

Overview

This Proton Pass skill is a disclosed password-manager CLI guide with powerful but purpose-aligned secret-management actions.

Install this only if you want an agent to help operate Proton Pass. Verify the installer source or use Homebrew/package-manager installation where practical, keep masking enabled, avoid writing rendered secrets to broadly readable files, and require explicit approval before viewing, sharing, deleting, transferring ownership, importing SSH keys, or injecting secrets into commands or files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The macOS/Linux quick-install example pipes a remotely fetched script directly into `bash`, which executes unreviewed code from the network immediately. In a security-sensitive skill centered on password and secret management, this raises supply-chain and remote code execution risk because users are encouraged to install a tool that will later handle credentials and vault data.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The Windows install command downloads a PowerShell script and executes it locally without any warning about the security implications. This is dangerous because it normalizes running network-delivered code, and compromise of the distribution endpoint or transport could lead to arbitrary code execution on systems that may later store or inject secrets.

Missing User Warnings

High
Confidence
95% confidence
Finding
The example shows `pass-cli inject --file-mode 0644` for files that may contain injected secrets, making them world-readable on many Unix systems. In the context of a secret-management skill, that materially increases the chance of local credential disclosure to other users, processes, backup tools, or accidental publication.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.