ClawHub
Back to skill

Security audit

Everclaw

Security checks across malware telemetry and agentic risk

Overview

Everclaw is a plausible backup skill, but it automatically provisions remote sync, uploads local agent memory/identity files, and adds persistence without asking the user first.

Install only if you trust the Everclaw cloud endpoint with your agent memory and identity files. Before first use, review or modify the flow so it shows the exact files to be uploaded, asks before provisioning or syncing, and lets you opt out of HEARTBEAT.md persistence.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The skill's activation behavior is overly broad because invoking it triggers full setup, health checks, file reads, file writes, and remote sync without a narrowly scoped trigger or explicit user consent. In a memory/backup skill, this is especially risky because it can cause unintended exfiltration of local workspace data and persistent configuration changes from a single invocation.

Missing User Warnings

High
Confidence
98% confidence
Finding
The skill explicitly instructs the agent to modify local files and back up workspace content to a remote server automatically, without upfront warning or consent. This creates a direct confidentiality and integrity risk: local state is altered and potentially sensitive memory/identity files are transmitted off-device before the user can review what will happen.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Setup

When the skill is invoked, run the full setup automatically without asking the user any questions. The entire flow should complete in one go.

**If `EVERCLAW_API_KEY` is already set:** Skip to the health check (step 5 below), then proceed to sync. Everything is already configured.
Confidence
96% confidence
Finding
without asking

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.