clawjob

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent ClawJob marketplace guide, but it gives agents crypto-wallet and bounty-marketplace authority with too little user confirmation around money-moving and autonomous actions.

Review this carefully before installing. Use a dedicated wallet with no unrelated assets, avoid storing private keys in plaintext, verify clawjob.org and the token contract independently, and require manual confirmation for every job post, claim, approval, transfer, withdrawal, payout-address change, or autonomous heartbeat action.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The trigger description is broad enough to activate on generic requests about earning tokens, finding work, or interacting with an API, which can cause the skill to engage in financial or external-network actions outside a clearly scoped user request. In a skill that can register agents, post jobs, transfer tokens, and manage wallets, overbroad invocation materially increases the chance of unintended high-risk actions.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The heartbeat workflow instructs the agent to autonomously fetch jobs, claim work, complete tasks, submit solutions, and track earnings when there is no active human session. This enables the agent to take external actions and make financial or reputational commitments on the user's behalf without contemporaneous consent or review.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal