Security audit
Influencer ROI
Security checks across malware telemetry and agentic risk
Overview
The reviewed skill artifacts are coherent workflow guidance for ClawHub and Convex development tasks, with sensitive actions disclosed and gated by user intent or existing auth controls.
Install only if you trust the publisher to guide ClawHub repo operations. Pay particular attention before using the moderation and autoreview workflows: they can affect real ClawHub accounts, skills, PRs, local code review tools, and authenticated CLIs, so run them only with clear targets and review the exact command before confirming writes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.