ClawHub
Back to skill

Security audit

healthcheck

Security checks across malware telemetry and agentic risk

Overview

This is a small local water and sleep tracker that writes to one JSON file, with some usability and validation cautions but no evidence of hidden or malicious behavior.

Install only if you are comfortable with the agent running local Node.js one-liners and storing water and sleep history in `{baseDir}/health-data.json`. Cup values should be validated as numbers before execution, and deleted or overwritten records may not be recoverable unless you keep backups.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The skill explicitly reads and writes a local JSON file but does not disclose that user actions will create and modify persistent local data. This is not code-execution dangerous by itself, but it creates a transparency and consent issue because users may not realize health-related data is being stored on disk.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The documented delete operation removes the last water record immediately and provides no warning, confirmation, or recovery mechanism. Even though the scope is limited to one JSON file, this can still cause unintended loss of personal tracking data if triggered accidentally or misunderstood.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.