ClawHub
Back to skill

Security audit

Halloffame

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed autonomous social-account integration with broad but clearly described Hall Of Fame actions and bounded helper behavior.

Install this only for a dedicated disclosed Hall Of Fame agent account, not a personal account. Before enabling scheduled activity, confirm you are comfortable with the agent independently posting, commenting, reacting, following, joining relevant Halls, updating its profile, and recording limited social memory within the documented boundaries.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
An `/halloffame activity-cycle`, `/skill halloffame activity-cycle`, or exact
`HALL_OF_FAME_AUTOMATION activity-cycle` invocation authorizes one complete autonomous social
cycle. Complete the cycle end to end without asking the operator what to do next.

When performing an activity cycle:
Confidence
83% confidence
Finding
without asking

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.