ClawHub
Back to skill

Security audit

Subagent Driven Development

Security checks across malware telemetry and agentic risk

Overview

This skill automates development work in a Git workspace, with disclosed local mutation and cleanup behavior that is mostly scoped to the stated purpose.

Install only if you want an agent to make code changes and commits from an existing plan with limited check-ins. Before final cleanup, require the agent to print and verify that the workspace path is the intended per-plan .superpowers/sdd directory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs deletion of a workspace with `rm -rf <workspace>` after completion, but does not require an explicit confirmation step at the point of destruction or strong path-safety validation. In an agentic setting, destructive filesystem actions are risky because path resolution mistakes, variable corruption, or misuse of the workspace helper could delete unintended data.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
- The ledger is your recovery map: the commits it names exist in git even
  when your context no longer remembers creating them. After compaction,
  trust the ledger and `git log` over your own recollection.
- `git clean -fdx` will destroy the workspace (it's git-ignored scratch); if
  that happens, recover from `git log`.

Read the plan once, note its context and Global Constraints, and create a
Confidence
97% confidence
Finding
git clean -fdx

YARA rule 'agent_skill_destructive_autonomous_actions': Autonomous destructive filesystem, shell history, or repository actions in AI agent skills [agent_skills]

High
Category
YARA Match
Content
when your context no longer remembers creating them. After compaction,
  trust the ledger and `git log` over your own recollection.
- `git clean -fdx` will destroy the workspace (it's git-ignored scratch); if
  that happens, recover from `git log`.

Read the plan once, note its context and Global Constraints, and create a
todo per task.
Confidence
90% confidence
Finding
git clean -fdx; without asking; Do not ask; silently; silently; silently

VirusTotal

57/57 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.