ClawHub
Back to skill

Security audit

Db Admin Console Free

Security checks across malware telemetry and agentic risk

Overview

This database administration skill is coherent, but it asks for high-impact database execution capability without firm safeguards around destructive operations or outbound callbacks.

Install only if you are comfortable giving the agent database-level execution authority. Use least-privilege database accounts, avoid production credentials by default, require manual review before DROP/TRUNCATE/ALTER/UPDATE/DELETE operations, and do not provide a callback URL unless you trust the destination and know what data will be sent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
87% confidence
Finding
The skill defines an optional callback_url for asynchronous completion even though its stated purpose is local database administration. This expands the trust boundary by enabling outbound network communication that could exfiltrate query results, schema details, or operational metadata if implemented without strict controls.

Context-Inappropriate Capability

Low
Confidence
81% confidence
Finding
Recommending ping-based network diagnostics goes beyond core database-admin functionality and encourages command execution against arbitrary hosts. In an agent with exec capability, this can be abused for network probing or as a stepping stone to broader reconnaissance in the user's environment.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly supports destructive operations such as DROP and TRUNCATE but does not require confirmation, dry-run output, or environment scoping before use. In an agentic setting with write/exec tools, a mistaken or manipulated prompt could lead to irreversible data loss or service disruption.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.