ClawHub
Back to skill

Security audit

Codex Owner Move E2E

Security checks across malware telemetry and agentic risk

Overview

This is a transparent maintainer-only checklist for testing skill owner migration, with no executable code or hidden automation.

Install or use this only if you are an authorized ClawHub maintainer validating owner migration with a disposable skill. Confirm the slug, selected owner, version numbers, migration flag, and cleanup target before running any publish, migrate, inspect, or delete step.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.