ClawHub
Back to skill

Security audit

Encryption Tool Free

Security checks across malware telemetry and agentic risk

Overview

This encryption skill is mostly coherent, but it includes examples that can permanently delete sensitive files immediately after encryption without verification or clear opt-in.

Review before installing. Use the encryption and audit guidance only with explicit file targets, verified backups, and a successful test decrypt before allowing any deletion. Avoid letting the agent run shred -u automatically unless you have intentionally chosen irreversible cleanup.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The example loop encrypts matching files and then immediately runs shred -u on the originals without any backup, confirmation, or verification step. In an agent setting, this can cause irreversible data loss if encryption fails silently, the wrong files are matched, or the user did not intend destructive cleanup.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The usage scenario encrypts sensitive files and deletes the originals right away with shred -u, again without validation or rollback guidance. Because the files include high-value configuration and secret material, an operational mistake can permanently destroy critical deployment credentials and recovery data.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.