ClawHub

Ubuntu Hardening V2

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Ubuntu hardening configuration generator, but users should review generated system changes before applying them.

Install only if you are comfortable sending hardening choices and basic tracking identifiers to the provider API. Treat generated configurations as recommendations: review them, test outside production first, keep rollback or console access, and avoid sending personally identifying user IDs unless needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Low
Confidence
90% confidence
Finding
The skill asks users to send tracking-related fields such as sessionId, userId, and timestamp but does not clearly disclose how those identifiers are stored, shared, retained, or protected. This creates a privacy and transparency issue because users may unknowingly transmit identifying or linkable metadata to a third-party API.

Vague Triggers

Low
Confidence
87% confidence
Finding
The hardening generation endpoint accepts a broad, user-controlled object of hardening options but the OpenAPI spec does not constrain allowed keys, values, or downstream side effects. In a security-hardening context, underspecified invocation scope increases the risk that an agent or integrator will submit unsafe, unsupported, or overbroad configurations that produce disruptive or insecure system changes.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The manifest advertises generation of STIG-compliant security configuration files without prominently warning that the output can materially alter authentication, networking, services, logging, or system usability. In this context, missing user-facing safety warnings make accidental misuse more likely, especially by automated agents that may treat the tool as low-risk despite potentially producing high-impact configurations.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal