ClawHub
Back to skill

Security audit

Evolution Engine

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent local memory system, but it asks for command-execution authority while describing itself as not needing exec and it creates long-lived local memory files.

Install only if you want a persistent local memory layer. Review or remove the exec permission before use if your platform allows it, inspect ~/evolution-engine/ periodically, and avoid letting the skill store secrets, sensitive personal data, or confidential third-party information.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Confidence
97% confidence
Finding
The skill states it is 'pure Markdown' and does not require exec capability, yet the manifest exposes the exec tool. That mismatch can mislead users and host agents about the skill's actual authority, increasing the chance that the skill is installed or trusted under a lower-risk assumption while still being able to invoke commands if the agent follows its workflow.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill's workflow instructs the agent to create and continuously modify persistent files under `~/evolution-engine/`, but the description does not present a clear up-front warning or consent boundary about local state changes. Persistent memory writes can surprise users, retain sensitive conversational data longer than expected, and create privacy or integrity risks if users believe the skill is ephemeral.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.