Security audit
Clay
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward Clay CLI helper that can read and change Clay contact data after the user logs in.
Install this only if you trust the Clay CLI and want an agent to use your Clay account. Review exact contact IDs and fields before write commands, avoid broad exports unless needed, and do not print, share, commit, or log ~/.config/clay.json.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.