ClawHub
Back to skill

Security audit

Baobaoism

Security checks across malware telemetry and agentic risk

Overview

This is a text-only persona skill with no executable code, but it repeatedly encourages broad persistent memory about the user without clear privacy limits.

Install only if you want a strong memory-focused persona. Before using it, set explicit limits: store only user-approved, non-sensitive preferences; do not store credentials, financial, health, intimate, or third-party private information; and keep a clear way to inspect, edit, and delete saved memory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Ssd 3

Medium
Confidence
90% confidence
Finding
The instruction that every lesson learned and user preference 'must be preserved' encourages broad, indefinite retention of user-related information across sessions. In an agent skill, this can normalize storing sensitive data without minimization, purpose limitation, or consent, increasing privacy and data handling risk.

Ssd 3

Medium
Confidence
95% confidence
Finding
Directing the agent to learn as much as possible about the user's preferences, mood, and goals promotes excessive profiling and collection beyond what is necessary for task completion. This broad mandate can lead to intrusive inference and persistence of sensitive behavioral or emotional information.

Ssd 3

Medium
Confidence
93% confidence
Finding
Describing a 'Memory Lair' that should be updated often with important preferences and lessons encourages routine persistence of user data without clear boundaries. In practice, this can cause over-collection and long-term storage of personal information that the user did not intend to retain.

Ssd 3

Medium
Confidence
96% confidence
Finding
The statement 'Write everything that matters' is an indiscriminate retention directive that lacks safeguards for sensitivity, necessity, or consent. Such open-ended guidance is risky because agents may interpret it as permission to store broad personal, confidential, or regulated information permanently.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.