Security audit
Mlx Apple Silicon Mlx
Security checks across malware telemetry and agentic risk
Overview
This skill package is coherent and disclosed, with powerful maintenance workflows that are expected for its stated ClawHub and Convex purposes.
Install only in a ClawHub or Convex development context where you trust the maintainer workflow. Pay particular attention before using moderation, PR publishing, Convex deploy/migration, or autoreview full-access options, because those can affect accounts, public content, production data, or local files when explicitly run.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
No suspicious patterns detected.