ClawHub
Back to skill

Security audit

Dcc Mcp Creator

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only developer guide for building DCC-MCP adapters, and its broader gateway, sidecar, discovery, and memory guidance is disclosed and purpose-aligned.

Install if you are comfortable using a developer skill that may guide an agent to edit code and run validation commands for DCC-MCP adapters. Review generated adapter changes before running them, especially anything involving gateway daemons, relay tunnels, LAN discovery, or durable memory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Skill Enumeration

Medium
Category
Agent Snooping
Content
skill-reference-docs:
      - "references/*.md"
  openclaw:
    homepage: https://github.com/dcc-mcp/dcc-mcp-core/blob/main/skills/dcc-mcp-creator/SKILL.md
---

# DCC-MCP Creator
Confidence
80% confidence
Finding
skills/dcc-mcp-creator/SKILL.md

Session Persistence

Medium
Category
Rogue Agent
Content
individual SKILL.md tool packages - use dcc-mcp-skills-creator.
license: MIT-0
compatibility: "dcc-mcp-core 0.17+, Python 3.7+"
allowed-tools: Bash Read Write Edit
metadata:
  dcc-mcp:
    dcc: python
Confidence
60% confidence
Finding
Write Edit metadata: dcc-mcp: dcc: python layer: infrastructure version: "0.19.20" # x-release-please-version search-hint: >- create DCC MCP adapter, Nuke MCP, DccServerBase,

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.