ClawHub
Back to skill

Security audit

Log Parser Grok Factory / 日志解析模式工厂

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only log parsing skill with no executable payload, but users should be careful not to paste sensitive production or security logs without redaction.

Before using this skill, redact credentials, tokens, personal data, internal hostnames, and sensitive security details from sample logs. Treat generated Grok patterns as drafts: validate them with fixtures and staged rollout checks before placing them in production or CI/CD workflows.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly targets production, security, and firewall logs, which commonly contain credentials, tokens, internal IPs, user identifiers, and other sensitive operational data. Failing to warn users about sanitizing or minimizing sample logs increases the chance that sensitive data will be pasted into the tool or downstream systems unnecessarily.

Missing User Warnings

Low
Confidence
85% confidence
Finding
Promoting direct export of generated patterns into CI/CD pipelines encourages automation of unvalidated parser logic. If incorrect or overly permissive patterns are deployed automatically, they can break log ingestion, hide important events, or degrade monitoring and detection coverage.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.