ClawHub
Back to skill

Security audit

gitverse-skill

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward GitVerse command-line skill, but it should only be used with a trusted GitVerse API URL and token.

Install only if you intend to let this skill use a GitVerse token to read and modify repositories, issues, and pull requests. Keep GITVERSE_BASE_URL unset unless you deliberately need a trusted HTTPS GitVerse-compatible endpoint, and use a least-privilege token because the script can create issues/comments, close issues, and merge pull requests.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Tainted flow: 'req' from os.environ.get (line 31, credential/environment) → urllib.request.urlopen (network output)

Critical
Category
Data Flow
Content
req.add_header("Accept", ACCEPT)
    req.add_header("Content-Type", "application/json")
    try:
        with urllib.request.urlopen(req) as resp:
            raw = resp.read()
            return json.loads(raw) if raw else None
    except urllib.error.HTTPError as e:
Confidence
95% confidence
Finding
with urllib.request.urlopen(req) as resp:

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.