ClawHub
Back to skill

Security audit

AgentRepoRouter

Security checks across malware telemetry and agentic risk

Overview

This package is a disclosed install notice for an external repo-routing skill and contains no executable payload itself.

Before installing the external runtime, review the linked repository source and choose narrow options for repository discovery, target agent hosts, and execution CLIs. The ClawHub package itself is only an install notice, but the external installer can modify local agent configuration.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.