Security audit
Global Citizen: 全球身份规划
Security checks across malware telemetry and agentic risk
Overview
The skill materials are coherent maintainer/development guidance with disclosed high-impact commands and no evidence of hidden exfiltration or destructive behavior.
Install only if you expect to use ClawHub maintainer or Convex development workflows. Review the moderation and autoreview helper sections before use, because they can act with your local credentials and, when explicitly invoked, perform privileged operations such as user bans, role changes, PR comments, or full-access nested reviews.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.