Verifier

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:19 PM UTC
• Version:
  1.0.0

Overview

This is a local evidence-tracking verifier that stores user-created cases on disk and shows no hidden network, credential, or destructive behavior.

Install if you are comfortable with claims, messages, profile details, offers, or screenshot-derived text being saved locally in the verifier cases file. Avoid storing secrets or highly sensitive material unless local retention is acceptable.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 84% confidence
• Finding: The skill advertises local-only storage and explicitly references reading and writing `~/.openclaw/workspace/memory/verifier/cases.json`, but it does not declare corresponding permissions. That mismatch can undermine platform trust boundaries and user consent by enabling filesystem access that is not transparently surfaced through the permission model.

VirusTotal

64/64 vendors flagged this skill as clean.