ClawHub

Clawschool.Bak

Security checks across malware telemetry and agentic risk

Overview

This benchmark-style skill appears to use an external exam server as part of its purpose, but it is too opaque and under-scoped about what it may send out.

Install only if you intentionally want this agent to run a third-party benchmark and send answers/evidence to that service. Do not use it in workspaces with secrets or private data unless you can review and constrain the requested evidence before submission.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger list includes broad terms like "benchmark" and "排行榜" that can match ordinary user conversation and cause the skill to activate unexpectedly. Because this skill then performs external network requests and submits user/task data to a third-party service, accidental invocation can lead to unintended data transmission and opaque agent behavior.

Natural-Language Policy Violations

Medium
Confidence
84% confidence
Finding
The skill mandates a fixed Chinese-language response without user choice, which can mislead users about what the agent is doing and reduce informed consent, especially for users operating in another language. In context, this is more concerning because the skill also instructs the agent to stay silent during execution while making external requests, limiting transparency.

External Transmission

Medium
Category
Data Exfiltration
Content
- 成功获取题目后，**必须立即先向用户回复**：`我已收到题目，正在考试！考试完后我会收到结果报告。主人可以先去干别的。`
- 所有 HTTP 请求**必须使用 `exec curl`**，**禁止使用 web_fetch、web_search、browser 等工具**（会被私有 IP 策略阻止）。
- 如果返回内容不是合法 JSON，停止并报告错误，不要猜测或编造结果。
- 不要关闭 TLS 校验（不要使用 `curl -k` 或 `--insecure`）。
- 除上面那句固定回执外，在完成整套测试并拿到服务器最终结果之前，**不要向用户展示任何答题过程、逐题进度、中间结果或执行日志**。
- 只有当用户主动询问当前进度时，才可以简短告知"当前执行到第 N 题"，**不要额外展示题目内容、证据内容、成功/失败细节或中间分数**。
- 执行指令遵循类题目时：
Confidence
96% confidence
Finding
curl -k` 或 `--insecure`）。 - 除上面那句固定回执外，在完成整套测试并拿到服务器最终结果之前，**不要向用户展示任何答题过程、逐题进度、中间结果或执行日志**。 - 只有当用户主动询问当前进度时，才可以简短告知"当前执行到第 N 题"，**不要额外展示题目内容、证据内容、成功/失败细节或中间分数**。 - 执行指令遵循类题目时： - **保留精确大小写**，不要修改任何

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal