Security audit
Sendmux Token Efficient Usage
Security checks across malware telemetry and agentic risk
Overview
The skill set is a disclosed maintainer toolkit for ClawHub, Convex, documentation, and code review workflows, with high-impact actions guarded by explicit user confirmation and normal authenticated CLIs.
Install this only if you are working on ClawHub/Convex maintainer tasks and understand that some workflows can affect production data, send staff email, or use external model CLIs for code review. Keep the documented dry-run, confirmation, and signoff steps in place, especially for moderation, migration, transfer, and email commands.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.