ClawHub
Back to skill

Security audit

Remote Copy

Security checks across malware telemetry and agentic risk

Overview

This remote-copy skill is coherent, but it teaches unsafe SSH defaults that can expose credentials or weaken remote-machine security.

Install only if you are comfortable reviewing and adjusting the SSH commands. Prefer verified host keys, key-based authentication, restricted firewall rules, and interactive or secure credential handling instead of command-line passwords.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill repeatedly uses `-o StrictHostKeyChecking=no` for `scp`, `ssh`, and `rsync`, which disables SSH host authenticity verification and makes man-in-the-middle interception much easier. In a file-transfer skill, this is especially dangerous because users may copy sensitive data while trusting a spoofed host without any warning.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill provides step-by-step instructions to install and enable SSH services and open firewall port 22 on Windows, macOS, and Linux, but does not warn that this exposes the remote machine to network access and brute-force attempts if not properly restricted. While enabling SSH is often legitimate for administration, omitting hardening guidance increases the chance users weaken system security unnecessarily.

Missing User Warnings

High
Confidence
99% confidence
Finding
The skill suggests `sshpass -p "{password}" ...`, which places the password on the command line where it may be exposed via shell history, process listings, logs, or monitoring tools. Because this skill handles remote access credentials, this creates a direct credential leakage risk without warning or safer alternatives.

VirusTotal

49/49 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.