ClawHub
Back to skill

Security audit

Json Repair Tool Free

Security checks across malware telemetry and agentic risk

Overview

This JSON repair skill mostly matches its stated purpose, but it asks for write and command execution while using overly broad activation language that could make it run in unrelated development tasks.

Review before installing. Use this skill only for specific JSON repair tasks on files you choose, and avoid letting it activate for general coding or deployment work. Be aware that it may overwrite files, create .bak copies containing sensitive data, and run command-line repair workflows.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
91% confidence
Finding
The skill introduces callback_url handling and later references network troubleshooting despite claiming the tool is for local JSON repair with no external dependency. In an agent context, this broadens the operational surface and can enable unnecessary outbound requests or SSRF-style behavior if a user-supplied callback URL is honored by supporting tooling.

Vague Triggers

High
Confidence
95% confidence
Finding
The invocation guidance is overly broad ('code generation', 'programming assistance', 'debugging', 'deployment'), making the skill likely to activate in many unrelated development contexts. Because the skill exposes read/write/exec capabilities, over-triggering can cause the agent to run file-modifying or shell-based repair workflows when JSON repair was not actually requested, increasing the chance of unintended command execution or file tampering.

Vague Triggers

High
Confidence
97% confidence
Finding
The keyword coverage block contains extremely broad and fragmented activation terms, including generic development phrases, which can bias an agent into selecting this skill for unrelated tasks. In a skill with exec and write access, such overbroad routing is dangerous because it expands the conditions under which filesystem changes or command execution may occur without a tightly relevant user request.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.