Prompt-injection style instruction pattern detected.
Warn
- Code
- suspicious.prompt_injection_instructions
- Location
- SKILL.md:89
Security audit
ClawProof Security Scanner
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed security-scanner skill that points users to an external npm/npx scanner, with risky examples presented as test inputs rather than commands to run.
Install only if you are comfortable running the external npm package. Review any changes made by auto-fix, and inspect MCP or git-hook configuration after enabling those integrations so you know what will run automatically.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
59/59 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.prompt_injection_instructions