Security audit
Ahrefs
Security checks across malware telemetry and agentic risk
Overview
This package contains powerful ClawHub and Convex maintenance skills, but the sensitive actions are disclosed, user-directed, and guarded by authentication, dry runs, or confirmation steps.
Install only in an environment where you intend the agent to assist with ClawHub or Convex operational work. Be especially careful with the moderation, content-rights, migration, and autoreview skills: confirm exact targets before admin writes, use dry runs and backups for production data changes, and avoid running review tools on code that contains secrets.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.