ClawHub
Back to skill

Security audit

Whisper Skill

Security checks across malware telemetry and agentic risk

Overview

The skill has a coherent networking purpose, but its main setup path runs a mutable remote shell installer with broad local authority.

Install only if you trust Whisper's installer endpoint and are comfortable letting it modify your local environment. Prefer downloading and inspecting the installer first, using a versioned release with checksum or signature verification, and understanding that created identities and egress traffic are externally attributable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill instructs users to execute `curl get.whisper.online | sh`, which streams remote content directly into a shell without any integrity verification, signature check, or review step. If the remote host, CDN, DNS, TLS termination, or delivery path is compromised, arbitrary code will run immediately on the user's system; because this is presented as the primary installation path in a security/networking skill, the risk is elevated.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:34