ClawHub
Back to skill

Security audit

Sql Query

Security checks across malware telemetry and agentic risk

Overview

This SQL skill is mostly purpose-aligned, but it requests broad execution and write authority while describing database credentials, automatic slow-query monitoring, disk caching, and webhook alerts without enough scoping or privacy controls.

Review before installing if this agent has access to real databases, production credentials, private query files, or operational webhooks. Use least-privilege database accounts, prefer read-only access unless writes are explicitly needed, avoid sending sensitive SQL or parameters to webhook destinations, and confirm where disk caches and benchmark baselines will be stored and retained.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
88% confidence
Finding
The skill advertises broad file processing, external API integration, and command execution capabilities that are not tightly justified by the stated SQL-query purpose. In an agent environment, unnecessary exec/write/API capabilities expand the attack surface and can be abused for lateral actions such as reading local files, altering data, or exfiltrating query results beyond the expected workflow.

Vague Triggers

Medium
Confidence
84% confidence
Finding
Overly broad activation language can cause the skill to trigger on generic database-related requests rather than clear SQL-query tasks. In a skill with exec/write capabilities, over-activation is dangerous because the agent may select this tool in contexts involving sensitive databases or administrative operations that the user did not intend to delegate.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill exposes write and command-execution capabilities without clear warnings about possible system or data impact. In practice, this can normalize dangerous use of a powerful tool, leading users or orchestration layers to authorize actions that modify files, run shell commands, or affect databases without informed consent.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
Automatic slow-query collection plus webhook alerting can transmit sensitive SQL text, parameters, table names, or application context to external destinations. Without clear privacy and data-transmission warnings, users may unknowingly enable exfiltration of operational or regulated data through monitoring integrations.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.