ClawHub
Back to skill

Security audit

Ping Monitor Tool Free

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward local website monitoring guide, with expected local scheduling and optional email alerts that users should configure carefully.

Before installing or using it, review any cron or systemd timer you add so it only runs the intended monitor script, and store SMTP credentials through environment variables or a secret manager rather than hardcoding them in reusable files. Expect local logs under ~/.ping-monitor and outbound network/email activity for the targets and alert addresses you configure.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs users to create local files under the home directory and install recurring cron/systemd jobs without explicit warning, consent language, or cleanup guidance. In an agent-execution context with the exec tool enabled, this increases the risk of unintended persistence and filesystem modification, especially if invoked by a user who does not realize the skill changes host state.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The document includes SMTP configuration with plaintext credentials and email sending behavior but does not warn about secret handling, storage risk, or outbound data transmission. In a skill that may be run through an agent with execution capability, this can lead to credential exposure in files, logs, shell history, or unintended external email transmission.

VirusTotal

54/54 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.