ClawHub
Back to skill

Security audit

Redis Context Cache Free

Security checks across malware telemetry and agentic risk

Overview

This Redis guide is mostly coherent, but it gives an agent execution authority for Redis commands that can delete cache data or change live server behavior without strong safety gates.

Install only if you want an agent to help with Redis operational commands. Before letting it run anything, confirm the Redis host, database, environment, and exact key pattern; avoid production use unless you have backups or rollback plans, and treat CONFIG SET, DEL, EVAL, DEBUG OBJECT, and eviction-policy changes as high-impact actions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
92% confidence
Finding
This skill is framed as guidance, but it includes commands that change live Redis server configuration and operational behavior, such as CONFIG SET maxmemory and eviction policy changes. In an agent context with exec enabled, these are state-changing administrative actions that can cause service disruption, evictions, or unexpected production impact if run against the wrong instance or without explicit approval.

Context-Inappropriate Capability

Low
Confidence
80% confidence
Finding
The inclusion of ping-based network diagnostics and general shell troubleshooting exceeds the minimal scope of a Redis caching guide and expands what an agent may execute. Even simple diagnostics can disclose network topology, probe unintended hosts, or normalize unnecessary shell access in a skill that should primarily provide Redis-specific guidance.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The activation scope uses broad, loosely bounded keywords covering common AI, LLM, and caching concepts, which raises the chance the skill is invoked in unrelated contexts. In an agent system with exec access, overbroad triggering increases the risk of unintended operational commands being suggested or executed against Redis without a narrowly relevant user request.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill contains destructive and state-changing commands such as DEL and runtime CONFIG changes but does not present a consistent, prominent warning about user impact, rollback, or production safety. In an agent setting, omission of such guardrails can lead to accidental data loss, cache invalidation, service instability, or production outages when examples are treated as ready-to-run procedures.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.