ClawHub
Back to skill

Security audit

Geepers Orchestrate

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed third-party API helper for multi-agent research, with no code or persistence, but prompts and tasks will be sent to dr.eamer.dev.

Install only if you are comfortable using dr.eamer.dev as an external service. Use a dedicated or least-privileged API key if possible, and avoid submitting secrets, personal data, regulated information, or confidential business material unless you have reviewed and accept the provider's data handling terms.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly instructs sending user-provided queries and task content to an external third-party API but provides no privacy notice, consent guidance, or data-handling limitations. This is dangerous because users may unknowingly transmit sensitive, proprietary, or regulated information outside the local environment to a remote service.

External Transmission

Medium
Category
Data Exfiltration
Content
### Dream Swarm — Parallel Search
```
POST https://api.dr.eamer.dev/v1/orchestrate/swarm
Body:
{
  "query": "What are the most effective treatments for Type 2 diabetes?",
Confidence
90% confidence
Finding
This endpoint directs the skill to transmit the user's query to api.dr.eamer.dev, which constitutes external data exfiltration from the agent environment to a third-party service. In context, the feature is intentionally networked, but it remains a security risk if users are not warned that their input may leave the trusted boundary.

External Transmission

Medium
Category
Data Exfiltration
Content
### Dream Cascade — Hierarchical Synthesis
```
POST https://api.dr.eamer.dev/v1/orchestrate/cascade
Body:
{
  "task": "Analyze the current state of quantum computing hardware",
Confidence
90% confidence
Finding
This endpoint sends task content to the same external orchestration API, potentially exposing internal plans, research topics, or sensitive business information to a remote provider. While the network call appears to be the core function of the skill, the absence of warnings, trust boundaries, or sensitivity checks makes the behavior dangerous in security-sensitive environments.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.