ClawHub
Back to skill

Security audit

Responsive Design

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only responsive web design skill with ordinary, disclosed install instructions and no evidence of hidden data access or execution.

Safe to install as responsive design reference material. Review the install path you choose: per-project installation limits where the skill is available, while global installation makes it available across that editor profile. Only run npx or GitHub install commands from sources you trust.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Session Persistence

Medium
Category
Rogue Agent
Content
From your project root:

```bash
mkdir -p .cursor/skills
cp -r ~/.ai-skills/skills/frontend/responsive-design .cursor/skills/responsive-design
```
Confidence
60% confidence
Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.