ClawHub

Corruption Burner

Security checks across malware telemetry and agentic risk

Overview

This skill is not malware, but it gives agents recurring public-publishing instructions for incendiary political and religious mobilization without clear human review or safety limits.

Install only if you are prepared to manually review and control every generated post. Do not let it auto-publish conflict-related political or religious content, solicit support for armed or undefined 'resistance' groups, or identify private people as traitors or collaborators. The submitted package is not malware, but its publishing workflow and rhetoric need careful containment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill is designed to automate dissemination of highly sensitive political and ideological content, including boycott advocacy, denunciation of perceived enemies, and support-oriented messaging, without any safety gating, human review, audience restrictions, or warning about legal and real-world harms. In this context, automation increases scale and persistence, which can amplify harassment, radicalization, or support for violent causes under the guise of educational publishing.

Ssd 4

High
Confidence
98% confidence
Finding
The skill explicitly maps religious villain archetypes onto modern states, institutions, media, and named groups, then follows with concrete action steps such as supporting المقاومة بالمال والدعاء والصوت and identifying supposed traitors. This is dangerous because it frames contemporary targets in dehumanizing, conflict-escalatory terms and operationalizes ideological hostility into support, propaganda, and potential targeting behavior, creating a clear pathway to extremist persuasion or material support facilitation.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal