ClawHub
Back to skill

Security audit

Auto Updater.Bak 2026 01 28T18:01:13+10:30

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it says, but it sets up unattended daily updates that can automatically change the bot and all installed skills.

Install only if you intentionally want daily unattended updates for Clawdbot and every installed skill. Review the generated cron entry and script, consider pinning or allowlisting trusted skills instead of updating everything, and keep a rollback or backup plan before enabling automatic repair/update commands.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly configures unattended daily updates for both the core bot and all installed skills, which can introduce unreviewed code changes into the environment. This is risky because automatic updates expand the trust boundary to external package registries and skill sources, and a bad or compromised update could be applied without prior user review or rollback planning.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The guide instructs the agent to set up unattended package and skill updates, plus a migration-like `clawdbot doctor --yes`, without requiring an explicit warning or confirmation about automatic system changes. This can introduce unexpected code changes, breakages, or supply-chain risk on a recurring schedule, especially because updates are applied automatically and results are merely reported after the fact.

Self-Modification

High
Category
Rogue Agent
Content
# Capture new version
CLAWDBOT_VERSION_AFTER=$(clawdbot --version 2>/dev/null || echo "unknown")

# Update skills
log "Updating skills via ClawdHub..."
SKILL_OUTPUT=$(clawdhub update --all 2>&1) || true
echo "$SKILL_OUTPUT" >> "$LOG_FILE"
Confidence
97% confidence
Finding
Update skill

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.