ClawHub
Back to skill

Security audit

Vpn Rotator Free

Security checks across malware telemetry and agentic risk

Overview

This VPN rotation skill is mostly transparent about what it does, but it asks users to set up persistent passwordless sudo for VPN commands, which deserves careful review before installation.

Install only if you are comfortable with an agent managing VPN state on this machine. Do not add the suggested sudoers entry as written; use exact absolute paths, least-privilege wrappers, and manual admin review. Treat ~/.vpn/creds.txt as a sensitive secret, keep it out of backups and repositories, and rotate VPN credentials if exposed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill instructs users to modify sudoers to allow passwordless privileged execution for VPN-related commands, which meaningfully lowers host protections. In an agent context with exec capability, normalizing NOPASSWD sudo increases the chance that future agent actions, script substitution, or misconfigured command paths result in unauthorized root-level operations.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The documentation tells users to place VPN credentials in a plaintext file using shell echo commands, creating a durable secret on disk that can be exposed through backups, shell history, mispermissions, or later accidental disclosure. Although chmod 600 helps, it does not eliminate the risk of plaintext secret storage, especially in automated or shared environments.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
| 错误类型 | 原因 | 恢复策略 |
|:---:|:---:|:---:|
| sudo密码提示 | 未配置免密sudo | 运行配置脚本或手动添加sudoers |
| 连接失败 | 凭证错误或服务器不可用 | 检查凭证，尝试其他服务器 |
| 仍被封锁 | API封锁了VPN IP段 | 降低rotate_every，增大delay |
| 无.ovpn文件 | 未下载服务器配置 | 从VPN服务商官网下载配置文件 |
Confidence
88% confidence
Finding
sudo

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.