ClawHub
Back to skill

Security audit

Skillscan

Security checks across malware telemetry and agentic risk

Overview

This skill is a small local scanner for SKILL.md files, and its code matches that stated purpose without hidden data transfer or destructive behavior.

Install only if you are comfortable running a local Python web service. Keep it bound to local use, avoid scanning files that contain secrets, and treat the scanner's verdicts as heuristic support rather than a replacement for manual review.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill explicitly requires Python packages and instructs the user to run a local HTTP server and invoke it with shell commands using curl, but it declares no permissions describing its network and shell behavior. This is a real security transparency issue because users and tooling cannot accurately assess or sandbox the skill's capabilities before installation or use.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.