ClawHub

Supply Chain Explainer Video

Security checks across malware telemetry and agentic risk

Overview

This skill is a simple NemoVideo API helper for generating supply-chain explainer videos, with the main caution that submitted prompts can contain sensitive business information.

Install only if you trust NemoVideo with the prompts you submit. Use a dedicated, revocable NEMO_TOKEN, and avoid sending confidential supply-chain diagrams, vendor relationships, pricing, budgets, customer data, or internal transformation plans unless third-party processing is approved.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to submit potentially sensitive business process details, audiences, and strategic goals to a third-party API without any notice about external transmission, data handling, retention, or privacy implications. In this business context, supply chain workflows, investment plans, and partner-related information can be commercially sensitive, so omitting a warning materially increases the risk of unintended data disclosure.

External Transmission

Medium
Category
Data Exfiltration
Content
Describe your supply chain process, target audience, and communication goal, and Supply Chain Explainer Video creates an animated process visualization or explainer video that makes your operations story impossible to misunderstand.

```bash
curl -X POST https://mega-api-prod.nemovideo.ai/api/v1/generate \
  -H "Authorization: Bearer $NEMO_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"skill": "supply-chain-explainer-video", "input": {"process": "omnichannel fulfillment", "audience": "executive stakeholders", "goal": "approve $2M WMS investment"}}'
Confidence
97% confidence
Finding
curl -X POST https://mega-api-prod.nemovideo.ai/api/v1/generate \ -H "Authorization: Bearer $NEMO_TOKEN" \ -H "Content-Type: application/json" \ -d

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal