ClawHub
Back to skill

Security audit

Clawsouls Skill

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed persona-management tool whose file changes, registry access, publishing, and optional memory sync fit its stated purpose.

Install only if you want an agent to manage persona files in your workspace. Confirm before `use`, `publish`, `sync`, or `swarm`; review uploaded files before publishing; and consider installing a trusted pinned CLI version instead of relying on automatic npx resolution.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The README encourages installing, switching, and publishing personas that inherently involve workspace modification and network interaction, but the examples provide no warning about those side effects or the need for explicit user confirmation. In an agent-skill context, this can normalize actions that write persona files, contact remote registries, or publish local content without users fully understanding the operational and privacy consequences.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The script automatically executes `npx --yes clawsouls`, which can fetch and run a package from the npm registry without any user-facing confirmation. In a security-sensitive skill that manages workspace persona files and can publish or authenticate to a registry, this creates a supply-chain risk: a compromised package, typosquatted dependency, or unexpected version resolution could result in arbitrary code execution in the user's environment.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.