Security audit
PriceClaw
Security checks across malware telemetry and agentic risk
Overview
PriceClaw is a clearly disclosed skill for looking up and contributing crowdsourced price data, with authentication and key storage explained.
Install this if you are comfortable with an agent querying PriceClaw and, after authentication, adding or voting on public price records. Review the OAuth URL before approving it, and only allow the API key to be saved if you want future sessions to use PriceClaw without re-authenticating.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.