ClawHub
Back to skill

Security audit

Super Freedcamp Agent Skill

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward Freedcamp API helper, with expected project-management write access and local session caching that users should understand before enabling.

Install this only if you want an agent to read and modify your Freedcamp workspace. Use least-privilege API credentials where possible, confirm before create/update/comment/mark-read actions, and restrict access to the local session cache or set FREEDCAMP_SESSION_PATH to a protected location.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill documents multiple state-changing operations such as creating tasks, updating tasks, adding comments, and marking notifications as read, but it does not prominently warn that these commands modify live remote project data. In an agent-executed context, this can lead to unintended writes against production collaboration systems if a user asks for exploration or summarization and the agent selects a mutating command without explicit confirmation.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill persists a session token and associated user data to a predictable local file path without setting restrictive permissions or informing the user. On multi-user systems or insecure environments, this can expose reusable authentication material and account metadata to other local processes or users.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/freedcamp.mjs:22

Sensitive-looking file read is paired with a network send.

Warn
Code
suspicious.potential_exfiltration
Location
scripts/freedcamp.mjs:180