Security audit
waboxapp
Security checks across malware telemetry and agentic risk
Overview
This skill bundle is mostly coherent for ClawHub maintainer work, but review is warranted because its autoreview helper grants nested Codex full local authority by default.
Install only in a trusted ClawHub maintainer environment. Review the autoreview helper before using it, consider setting `AUTOREVIEW_YOLO=0` or using `--no-yolo`, and be cautious with fallback reviewer CLIs because generated diffs may be sent to those tools. For moderation and proof publishing, require explicit targets and confirmation before writes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.