ClawHub
Back to skill

Security audit

Git辅助

Security checks across malware telemetry and agentic risk

Overview

This Git helper is not clearly malicious, but it needs review because it grants command/write access for mutating Git actions while its trigger scope is broad and loosely defined.

Review this skill before installing. It appears to be a low-quality or generic Git helper rather than malware, but it can guide an agent toward command execution and repository changes, including push/pull behavior. Use it only in repositories where you are comfortable with agent-assisted Git mutations, and require confirmation before any command that changes files, branches, remotes, or history.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

High
Confidence
94% confidence
Finding
The activation text is overly broad and unrelated to Git, including system monitoring, log analysis, alerting, and deployment management. In an agent environment, this can cause the skill to be selected in contexts far outside its intended scope, exposing exec/write capabilities during unrelated tasks and increasing the chance of unintended repository or shell actions.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill advertises pull/push plus command execution while lacking a clear warning that these actions can modify local repositories and remote state. In this context, the danger is elevated because the skill declares exec and write tool access, so an agent could perform destructive or irreversible Git operations without sufficiently explicit user consent or safety boundaries.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.