Security audit
Clawhub Dev Calendar
Security checks across malware telemetry and agentic risk
Overview
This skill appears to generate development calendars as advertised, with local file creation that is disclosed and proportionate to the purpose.
Install if the Saskatchewan/ClawHub development-calendar defaults fit your workflow. Review generated ICS files before importing or sending them, keep outputs in intended workspace paths, and avoid saving client-sensitive schedule details to memory unless you want them reused later.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.