ClawHub
Back to skill

Security audit

Render

Security checks across malware telemetry and agentic risk

Overview

This Render skill is mostly coherent, but it can suspend services without the same confirmation guard used for other state-changing actions.

Review this before installing if the Render account controls production or customer-facing services. The main issue is that suspension is not clearly marked as a state-changing action, so users should require explicit confirmation before any restart, resume, suspend, deploy, or rollback operation. Only run the oo CLI installation or login steps after approving the local setup.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Intent-Code Divergence

Medium
Confidence
98% confidence
Finding
The skill misclassifies untagged actions as read-only while `suspend_service` is an untagged operation that changes service state. That can cause an agent or user to run a state-changing command without the confirmation gate the document says applies to writes, increasing the risk of unintended outages or service disruption.

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger phrase says to use this skill for ANY Render request instead of calling the API directly, which is overly broad and encourages automatic invocation for all Render-related tasks. In an agent setting, broad routing increases the chance of unintended execution of sensitive operational actions without sufficient task-specific scrutiny.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The document gives shell-based installation commands in first-time setup but only highlights risks for Render state-changing actions, not for local system-modifying setup commands. This can normalize executing installer scripts during routine skill use, potentially leading to unreviewed system changes or exposure to supply-chain compromise.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.