ClawHub
Back to skill

Security audit

Geotiff Info

Security checks across malware telemetry and agentic risk

Overview

This skill is a local GeoTIFF metadata viewer whose file access and batch scanning fit its stated purpose.

Install if you need a local GeoTIFF metadata CLI. Use directory batch mode only on directories you intend to scan, since it will read matching TIFF files there and may print file paths and metadata to the console or redirected JSON output.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution, suspicious.obfuscated_code

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
tests/conftest.py:18

Potential obfuscated payload detected.

Warn
Code
suspicious.obfuscated_code
Location
tests/test_security.py:34