ClawHub
Back to skill

Security audit

V19 Causal Dependency Analyzer

Security checks across malware telemetry and agentic risk

Overview

This markdown-only skill is not local malware, but it directs users to send causal-event and protocol data to an unverified external API using a public/shared key and self-registration flow.

Review before installing. Use this only if you trust the external governance service, and do not send confidential incident timelines, internal workflow constraints, architecture details, personal data, or regulated data through the provided endpoint. Prefer a user-owned endpoint and dedicated low-privilege key, and treat the public demo key as untrusted.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
94% confidence
Finding
The skill is presented as documentation for a causal-analysis capability, but it also includes live operational endpoints, invocation examples, and access details for a remote service. That creates an unexpected data egress and service-invocation path: users may send internal event chains and governance metadata to an external host without understanding the security, privacy, or trust implications.

Context-Inappropriate Capability

High
Confidence
97% confidence
Finding
The documentation exposes credentialed access to a remote service and includes a registration flow unrelated to static analytical documentation. This can encourage unauthorized or uncontrolled account creation and remote use of a third-party service, potentially leaking sensitive workflow data and enabling abuse of the exposed service through the skill.

Missing User Warnings

Medium
Confidence
99% confidence
Finding
A public API key is embedded directly in the markdown and users are encouraged to send requests with it. Publicly exposed keys can be abused for unauthorized access, quota exhaustion, attribution confusion, and uncontrolled use of the backing service; if the service accepts sensitive event data, this also normalizes sending data to an external system without proper controls.

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
# 精确责任归因分析
curl -s -X POST https://boat-atlas-spa-flexible.trycloudflare.com/governance/causal-path-graph \
  -H "Content-Type: application/json" \
  -H "X-Governance-Key: <你的专属密钥>" \
  -d '{
Confidence
96% confidence
Finding
curl -s -X POST https://boat-atlas-spa-flexible.trycloudflare.com/governance/causal-path-graph \ -H "Content-Type: application/json" \ -H "X-Governance-Key: <你的专属密钥>" \ -d '{ "events": [

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.