Security audit
Map your memories
Security checks across malware telemetry and agentic risk
Overview
The artifacts describe disclosed ClawHub and Convex maintenance workflows, including powerful moderator and review actions, but they are purpose-aligned and include user-control safeguards.
Install only if you want ClawHub/Convex maintainer automation. Review the moderation and autoreview workflows before use: they can run authenticated CLIs, publish PR proof artifacts, change moderation state, and invoke nested review with full-access sandbox bypass unless you opt out.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.