ClawHub
Back to skill

Security audit

Pi Admin

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real Raspberry Pi admin skill, but it can make root-level system changes and restart a hardcoded gateway service with uneven confirmation safeguards.

Install only on the intended Raspberry Pi after reviewing the hardcoded Clawdis Gateway path, ports, and IPs. Use read-only commands or --dry-run first, and do not let an autonomous agent run maintenance commands unless you accept possible package changes, cleanup, reboot, service disablement, gateway interruption, and persistent system tuning changes. There is no artifact-backed evidence of data theft, obfuscation, or malicious exfiltration; the concern is operational control and scoping.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Tp4

High
Category
MCP Tool Poisoning
Confidence
88% confidence
Finding
The skill is presented as general Raspberry Pi administration, but its documented behavior also includes managing a specific custom application, killing processes, launching a gateway from a hardcoded path, and exposing concrete local/Tailscale access endpoints. That mismatch matters because operators may invoke a seemingly routine admin skill without realizing it can control a bespoke service and disclose sensitive environment-specific details, increasing the chance of unintended service disruption or information leakage.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
**Total RAM savings:** ~100MB
**Reversibility:** Yes, use `--undo` flag to revert

**Note:** All maintenance commands require sudo and ask for confirmation before making changes. Use `--dry-run` flag to preview changes without applying them.
Confidence
79% confidence
Finding
sudo

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.