ClawHub
Back to skill

Security audit

Dex

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Dex CRM assistant that can read and change CRM, calendar, and email-metadata data, with appropriate user-control guidance for sensitive actions.

Install only if you want an assistant to access and manage your Dex CRM, including contacts, notes, reminders, calendar events, and email search metadata. Review the MCP setup behavior if you do not want Dex configured across multiple AI clients, and require clear previews before bulk changes, deletion, merging, or calendar updates.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The manifest description ends with "or handle another personal CRM task involving the user's professional network," which is an open-ended activation scope rather than a narrowly bounded trigger. In a manifest file, this broad phrasing can make it unclear when the skill should activate versus when a different skill or general assistant behavior should apply.

Vague Triggers

Low
Confidence
83% confidence
Finding
The instruction "When a user says \"I have a meeting with X\"" describes an invocation condition using common natural language that may overlap with everyday conversation. The file does not pair this example with constraints or negative examples clarifying that it applies only to Dex-based CRM meeting preparation.

Vague Triggers

Medium
Confidence
94% confidence
Finding
The manifest's default prompt says "Use $dex-skill to organize my network, prepare upcoming meetings, and turn recent meeting notes into follow-ups." While the "$dex-skill" token adds some specificity, the surrounding invocation scope is broad and the file does not define clearer trigger constraints, exclusions, or negative examples. In a manifest file, this can make the skill's activation conditions less precise than recommended.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
2. Ask the user to run `dex auth --token dex_your_key_here` in their own terminal
3. Key is saved to `~/.dex/api-key` (chmod 600)

Never ask the user to paste an API key into chat. Do not print, log, commit, or include it in tool arguments that will be shown back to the user.

**Option 2 — Device Code Flow (works on remote/headless machines):**
Confidence
80% confidence
Finding
Never ask the user

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.