ClawHub
Back to skill

Security audit

Sirchmunk

Security checks across malware telemetry and agentic risk

Overview

This appears to be a local file-search helper that sends search queries to a localhost service, with disclosure gaps but no evidence of malicious or external data exfiltration.

Install only if you intentionally use the Sirchmunk local search service and are comfortable with your search terms being sent to its localhost API. Check which folders Sirchmunk indexes and whether it logs queries, especially if you search private workspaces or sensitive documents.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
84% confidence
Finding
The description 'Use when you need to search for files or content by asking natural language questions' is broad enough to match many generic requests. In an agent router, this can cause over-invocation of the skill, sending user prompts or sensitive workspace questions to the local search service when the user did not explicitly request that behavior.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill omits a clear warning that the user's natural-language query is transmitted over HTTP to a listening local API. Even though the destination is localhost, the query leaves the agent context and may be logged, intercepted by another local process, or handled by an unexpectedly exposed service.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal