ClawHub
Back to skill

Security audit

pre-compact

Security checks across malware telemetry and agentic risk

Overview

The skill is mostly coherent for creating handoff notes, but it can modify persistent global agent instructions in auto mode without a separate confirmation.

Install only if you are comfortable with a skill that writes durable session handoff files and may update agent instruction files. Avoid `auto` mode unless you have reviewed the proposed scope, especially if global files like `~/.claude/CLAUDE.md` or `AGENTS.md` could be changed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill instructs the agent to inspect and potentially modify global instruction files like ~/.claude/CLAUDE.md or AGENTS.md, which are persistent configuration surfaces outside the current project. This is dangerous because it can silently alter future agent behavior across sessions or repositories, creating lasting trust-boundary violations without an explicit, prominent user-facing warning.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
I will compact this context soon. The summary can be wrong. Files are the
source of truth. Move everything a fresh session needs from this conversation
into files. Mode: $ARGUMENTS. `auto` or `a` means: apply all proposed updates
without asking.

Write `.agents/compact-handoff/YYMM-DD-HHMM-<short-slug>.md`. Start with the
line `# Handoff <date> <time> <repo>@<branch>`. Then write these sections:
Confidence
92% confidence
Finding
without asking

Session Persistence

Medium
Category
Rogue Agent
Content
into files. Mode: $ARGUMENTS. `auto` or `a` means: apply all proposed updates
without asking.

Write `.agents/compact-handoff/YYMM-DD-HHMM-<short-slug>.md`. Start with the
line `# Handoff <date> <time> <repo>@<branch>`. Then write these sections:

- Position: what we are doing, why, and where we stopped.
Confidence
82% confidence
Finding
Write `.agents/compact-handoff/YYMM-DD-HHMM-<short-slug>.md`. Start with the line `# Handoff <date> <time> <repo>@<branch>`. Then write these sections: - Position: what we are doing, why, and where w

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.