ClawHub
Back to skill

Security audit

agents efficient workflow

Security checks across malware telemetry and agentic risk

Overview

This skill openly creates local handoff notes for multi-agent work, which matches its stated purpose, but users should avoid putting secrets in those shared notes.

Install this if you want agents to coordinate through local handoff files. Review what gets written to ~/.openclaw/shared-handoffs/, avoid secrets or unnecessary private data, and delete old handoff files when they are no longer needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Session Persistence

Medium
Category
Rogue Agent
Content
### 2. Persist the handoff locally before transfer | 交接前先把信息落到本地

Before asking another agent to continue, write a markdown handoff file in the shared handoff directory.
在让另一个 agent 接手前，先在共享交接目录写好 Markdown 交接文件。

Default shared directory / 默认共享目录：
Confidence
95% confidence
Finding
The skill directs agents to persist handoff data in a shared local directory and treats those files as the source of truth, which can expose sensitive context to other agents or processes with access to that location. Because the guidance encourages durable cross-session storage of objectives, findings, risks, and file paths, it increases the chance of unintended data retention, cross-task leakage, or tampering with subsequent agent decisions.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.