Security audit
Skill Batch Publisher
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed batch publisher for local OpenClaw skills and its behavior matches that purpose.
Before installing, understand that running this script can publish multiple local skills to your ClawHub account using your existing clawhub login. Use it only on a directory you intend to publish, review the generated slugs, and be careful before wiring it into cron because repeated runs may continue publishing queued skills.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.