ClawHub

Cloudflare API

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Cloudflare administration skill, but it can make real DNS and tunnel changes using a powerful API token.

Install only if you want an agent to help administer Cloudflare. Use a least-privilege Cloudflare token limited to the needed account and zones, protect ~/.cloudflare_token, confirm every DNS or tunnel change before execution, and treat tunnel run tokens as secrets.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill documents destructive or security-sensitive operations such as deleting tunnels, updating DNS, and creating externally reachable tunnel ingress without any warning about outage, traffic hijack, or unintended exposure risks. In an agent context, this increases the chance that a user request is translated into impactful infrastructure changes without informed confirmation.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script prints the tunnel run token directly to stdout, which can expose a credential to shell history capture, terminal logging, CI logs, session recording, or other users monitoring the console. In this Cloudflare administration context, the token is highly sensitive because it authorizes running the tunnel and could enable unauthorized access or traffic interception if leaked.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal