Security audit
Claude Usage Tracker
Security checks across malware telemetry and agentic risk
Overview
The reviewed skill artifacts are coherent ClawHub and Convex workflow helpers with disclosed command use, including some powerful maintainer actions that require care.
Install only if you trust the repo-maintainer workflow. Before using the review helper, consider disabling full-access mode with --no-yolo and disabling fallback reviewers if your diffs are sensitive; for moderation commands, verify the exact target and reason before confirming writes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
No suspicious patterns detected.