ClawHub
Back to skill

Security audit

ssh-tunnel-swarm

Security checks across malware telemetry and agentic risk

Overview

The skill’s SSH tunneling behavior is clearly described, but its install instructions include an unsafe pipe-to-bash command from a mutable GitHub branch.

Review and pin the installer before use: download the script to a file, inspect it, prefer a tagged release or verified checksum/signature, then execute it explicitly. Only use rules files that point to hosts and key files you control, and be especially careful with reverse tunnels because they can expose local services to a remote host.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The documentation instructs users to download a script from the network and immediately execute it via a shell pipeline, which removes the opportunity to inspect the content, verify integrity, or pin a trusted version. If the GitHub account, repository, branch, transport path, or referenced script is compromised, this becomes a direct remote code execution path on the user's machine.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.