ClawHub
Back to skill

Security audit

KWDB Install Deploy

Security checks across malware telemetry and agentic risk

Overview

This skill guides a user-directed KaiwuDB deployment and its privileged actions are expected for that purpose, but users should verify the installation package before running it.

Install only on systems intended for KaiwuDB deployment. Use a trusted KaiwuDB package, verify its checksum or source when available, review the bundled deploy.sh before execution, and avoid using broad root, docker-group, or passwordless-SSH access outside a controlled deployment account or test environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The guide instructs users to extract software into /opt and later run deployment scripts that install services and modify system state, but it does not clearly warn that these actions are privileged and can change the host configuration. In a skill that may be followed semi-automatically, omission of explicit safety boundaries increases the risk of unintended system modification or running untrusted installer content with elevated privileges.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
- SSH passwordless login is configured between the current node and other nodes in the cluster.
- The installation user is the `root` user or a regular user with `sudo` privileges.
- When deploying with the container installation package, if the installation user is a non-`root` user, add the user to the `docker` group by running `sudo usermod -aG docker $USER`.

## Deployment Steps
Confidence
78% confidence
Finding
sudo

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

No suspicious patterns detected.