ClawHub
Back to skill

Security audit

Sleep Routine Coach

Security checks across malware telemetry and agentic risk

Overview

This sleep coaching skill is mostly coherent and consent-based, but its delete-all command can recursively delete whatever directory is passed as the data directory.

Review before installing. Use only a dedicated sleep-routine data directory, do not point SLEEP_ROUTINE_DATA_DIR or --data-dir at a home, project, sync, or shared directory, and be careful with the delete-all feature because it is destructive within that directory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
The delete-all command recursively deletes every file and subdirectory under a user-supplied --data-dir and then attempts to remove the directory itself, with no restriction that the path must be the application's expected data directory. If this script is invoked by an agent or wrapper that forwards user-controlled arguments, an attacker or mistaken user could point it at arbitrary filesystem locations and cause destructive data loss far beyond the sleep-profile scope.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.