ClawHub
Back to skill

Security audit

Extract Error Patterns

Security checks across malware telemetry and agentic risk

Overview

This looks like a local log-analysis skill, but it asks for an unexplained API key and under-documents write behavior that can copy sensitive log content into output files.

Review before installing. Do not provide an API key unless the publisher documents the exact service, why the key is needed, what data is sent, and how the key is handled. Treat any generated alert-rule files as sensitive because they may contain copied log lines, including tokens, emails, paths, stack traces, or customer identifiers.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The README leaves the activation condition as a placeholder ('When triggered: [trigger condition]') instead of defining when the skill should be invoked. In an agentic environment, ambiguous triggering can cause the skill to run in unintended contexts, increasing the chance of inappropriate log processing, incorrect alert generation, or misuse of any write-capable functionality.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The README advertises a '--mode write' operation without explaining what it writes, where outputs go, or what side effects may occur. In a security-sensitive agent workflow, undocumented write behavior can lead users or agents to modify files or state unexpectedly, which is especially risky when processing operational log data and generating alert rules.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.