Security audit
Google Search Console
Security checks across malware telemetry and agentic risk
Overview
The skill artifacts are coherent workflow guidance for ClawHub and Convex work, with sensitive capabilities disclosed and mostly bounded by user intent and existing auth controls.
Install only if you want these repo-specific ClawHub/Convex workflows. Pay particular attention to the autoreview helper's default full-access nested review mode and fallback reviewers, and use the documented opt-outs or confirmations when handling private code, credentials, production data, or staff moderation actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.