Security audit
Geocodio
Security checks across malware telemetry and agentic risk
Overview
The reviewed skill content is transparent and purpose-aligned, with no evidence of hidden exfiltration, destructive automation, or deceptive behavior.
Install only if you expect these developer workflow capabilities. Pay special attention before using moderation or review helper commands, because they can affect real ClawHub accounts, publish proof artifacts, invoke external reviewer tools, or run broad local repo commands when explicitly requested.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.