ClawHub

BORT Agent (BAP-578)

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed helper for talking to BORT agents, but users should only send messages through a BORT runtime endpoint they trust.

Install only if you intend to send messages to BORT agents. Verify BORT_RUNTIME_URL and BNB_RPC_URL before use, avoid sending sensitive information to untrusted runtimes, and treat external agent responses as untrusted content.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill clearly instructs the agent to execute local shell scripts, but it does not declare corresponding permissions or execution boundaries. This creates a capability mismatch that can lead to unexpected command execution in environments that rely on permission metadata for policy enforcement or user consent.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal