ClawHub
Back to skill

Security audit

Weekly Review

Security checks across malware telemetry and agentic risk

Overview

The skill is mostly a weekly report renderer, but it bundles an under-disclosed legacy SQLite reader that can access local session and usage data.

Install only if you are comfortable with the package containing legacy code capable of reading a local AI-session SQLite database when explicitly used or when database environment variables are set. Prefer using the documented review-input JSON and MCP renderer paths, and avoid invoking the legacy analyzer unless you intentionally approve the database path and understand the session data it will process.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill declares itself as a formatting/templating aid, but static analysis detected effective capabilities to read environment variables and read/write local files without corresponding permission disclosure. That creates a trust and review gap: a user or host agent may invoke it expecting harmless Markdown rendering while it can access local data and persist artifacts on disk.

Tp4

High
Category
MCP Tool Poisoning
Confidence
96% confidence
Finding
This is a true security-relevant mismatch: the skill claims the host agent collects facts and the skill only structures output, yet analysis indicates it can discover database paths from environment variables, read local SQLite session/usage data directly, analyze raw records, and write chart files. That hidden expansion from formatter to local data collector materially increases privacy risk and can expose sensitive session histories, usage metadata, and filesystem information beyond user expectations.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.