ClawHub
Back to skill

Security audit

implement

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent coding workflow, but it can automatically create branches, copy ignored environment files, push code, open draft PRs, and start background servers from broad implementation requests.

Install only if you want a skill that can take implementation requests all the way through branch creation, commits, remote push, draft PR creation, and dev-server startup. Be especially careful in repositories with sensitive .env files, and use explicit wording when you do or do not want this workflow to run.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The skill explicitly instructs copying gitignored files such as .env.local, .env.*, and node_modules into a new worktree. Gitignored env files commonly contain secrets, and duplicating them into additional worktrees broadens the exposure surface and may place credentials into contexts that do not need them for code implementation. In this skill, that risk is heightened because the copy is automatic and normalized as part of the workflow.

Vague Triggers

Medium
Confidence
83% confidence
Finding
The invocation description includes broad triggers such as 'build X', 'fix X', 'ship it', and 'go code it up', which can cause the skill to activate on loosely phrased requests. In this context, unintended invocation is more dangerous because the skill performs consequential actions like creating branches, pushing to origin, and opening PRs, so accidental routing can trigger repository changes without sufficient user intent confirmation.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.