ClawHub
Back to skill

Security audit

know-enough

Security checks across malware telemetry and agentic risk

Overview

This skill is a retrieval discipline guide that tells an agent to look up only decision-relevant information and does not add hidden execution, persistence, or mutation behavior.

Before installing, understand that the skill can steer an agent to search connected knowledge bases, including private or business records if those tools are already available. Use it in environments where retrieval permissions and source registries are configured appropriately.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The description says to use the skill whenever missing knowledge could materially affect a task and retrieval tools are available, which is a very expansive condition rather than a narrowly scoped trigger. It does not provide explicit trigger phrases, boundaries, or negative examples clarifying when the skill should not be invoked beyond general procedural guidance.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Gotchas

- Do not retrieve everything because retrieval is available.
- Do not ask the user for a fact that an available source can cheaply establish.
- Do not treat semantic similarity as authority.
- Do not treat precedent as current policy.
- Do not keep researching after the decision is already robust to additional information.
Confidence
80% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.