ClawHub
Back to skill

Security audit

Timer Build Monitor

Security checks across malware telemetry and agentic risk

Overview

This timer skill is not clearly limited to build monitoring and can delegate arbitrary delayed tasks to subagents with the current context.

Review before installing. Use this only for simple build or status checks unless you are comfortable with delayed subagents receiving current context and acting on broad task descriptions. Avoid putting secrets or sensitive operational details in timer descriptions or results.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
88% confidence
Finding
The documentation frames the skill as a specialized build-monitor timer, but the command semantics and implementation notes describe a generic delayed task executor that can spawn subagents with the full task description and current context. This mismatch can cause users to grant trust appropriate for a narrow timer while actually enabling broader delegated actions later, increasing the chance of unintended data exposure or misuse through arbitrary delayed task execution.

Intent-Code Divergence

Medium
Confidence
84% confidence
Finding
The skill claims specialization for build monitoring in its comparison section, but later documents arbitrary delayed task execution. Security-relevant scope ambiguity is dangerous because users and reviewers may underestimate the authority granted to spawned subagents, especially when the subagent receives full task description and current context.

Missing User Warnings

Low
Confidence
73% confidence
Finding
The document notes a JSON state file under the user's home directory but does not clearly warn users that timer metadata persists on disk. Even if the stored fields are not secrets by design, task names, timestamps, session identifiers, and results may reveal sensitive project or operational details to other local users, backups, or forensic tools.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.