ClawHub
Back to skill

Security audit

ts3

Security checks across malware telemetry and agentic risk

Overview

This skill is a small, disclosed TypeScript server helper whose only script prints status messages and shows no data access, persistence, networking, or destructive behavior.

Review the included shell script before running future versions because exec permission can run local commands. In this version, the script is minimal and does not access files, secrets, or the network.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The manifest requests the "exec" permission even though the declared purpose is a TypeScript server-side framework namespace with scaffolding, validation, and logging. Shell execution materially expands the attack surface because any referenced script or downstream instruction can spawn arbitrary commands on the host, and the provided context does not show a clear necessity for that capability in the manifest itself.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.