ClawHub
Back to skill

Security audit

BilldDesk Remote Desktop

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed remote-desktop guidance skill with sensitive but expected remote-control features.

Install only if you intentionally want guidance for using BilldDesk. Use it only on devices you own or are authorized to administer, set strong unique passwords, keep the software updated, be careful with clipboard and file transfer, and prefer private-network access such as Tailscale or a trusted self-hosted relay.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill promotes powerful remote-access capabilities including unattended startup, file transfer, clipboard sync, and batch control, but it does not clearly warn about consent, authorization boundaries, or the privacy implications of controlling another device. In a remote desktop context, these omissions increase the risk of misuse for unauthorized access, surveillance, or data exfiltration, especially by less experienced users who may treat the instructions as implicitly safe.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.