ClawHub
Back to skill

Security audit

Restaurant Operator

Security checks across malware telemetry and agentic risk

Overview

This skill appears purpose-aligned, but users should review what business systems and data they connect before installing.

Before installing, confirm which POS, inventory, weather, and reservation accounts it will access, grant least-privilege API scopes, and avoid connecting production systems unless you understand what data the skill can read or change.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill advertises integrations with POS, inventory, weather, and reservation systems, which implies access to operational and potentially sensitive business data, but it provides no disclosure about what data is collected, how it is used, stored, shared, or protected. This creates a real privacy and security risk because users may authorize broad integrations without informed consent or understanding of downstream exposure.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.