ClawHub
Back to skill

Security audit

Catchclaw Agentar

Security checks across malware telemetry and agentic risk

Overview

CatchClaw mostly behaves like a disclosed agent package manager, but a crafted new-agent name can make it write files outside the advertised workspace area.

Install only agentars and publishers you trust. Prefer installing into a new named agent, use a simple name with letters, numbers, hyphens, or underscores only, and avoid names containing slashes or dots. Treat overwrite and rollback as workspace-replacement actions, and avoid passing API keys unless the installed agentar truly needs them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger condition allows invocation when a user merely mentions "agentar" or "catchclaw," even without requesting a concrete action. In a skill that can search remote content, install marketplace packages, overwrite workspaces, and perform rollback/export operations, this broad trigger increases the chance of accidental activation and unintended side effects.

Session Persistence

Medium
Category
Rogue Agent
Content
**Source:** This skill is from the [CatchClaw skill repository](https://github.com/OpenAgentar/catchclaw).

An agentar is a distributable agent archive (ZIP) containing workspace files such as SOUL.md, skills, and other configuration. It can be installed as a new agent or used to overwrite an existing agent with a single command.

## Trigger Conditions
Confidence
87% confidence
Finding
write an existing agent with a single command. ## Trigger Conditions - User asks to search / find / browse agentars - User asks to install / download a specific agentar - User asks to export / packa

Session Persistence

Medium
Category
Rogue Agent
Content
```bash
$CLI install <slug> --name <name> [--api-key <key>]
$CLI install <slug> --overwrite
```

Install an agentar from the marketplace.
Confidence
83% confidence
Finding
write ``` Install an agentar from the marketplace. **Options:** - `--name <name>` — Create a new agent with the given name. Existing agents are not affected. (Preferred; list this option first when

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.