ClawHub
Back to skill

Security audit

FDE Delivery Router

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed project routing and state-tracking helper that writes local status/history files but does not show hidden network, credential, or destructive behavior.

Install only if you want an FDE engagement router that may maintain local project state files. Keep those files in the intended project directory, avoid storing secrets or raw customer material in them, and review state changes when advancing stages, skipping gates, or changing owners or decisions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The skill description is broad enough to match many normal project, audit, handoff, and delivery situations, which can cause the agent to select this router in contexts where a narrower skill would be safer or more appropriate. Because this router can then direct stateful workflow decisions and trigger downstream specialist handling, over-selection increases the chance of unintended actions, premature routing, or unnecessary access to project artifacts.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill instructs the agent to maintain and append to project state files, including initialization and mutation workflows, but does not require an explicit user-facing warning or confirmation before creating or modifying files. In practice, this can lead to silent workspace changes, accidental overwrites, or persistence of sensitive operational metadata, especially when the router is invoked from a broad set of situations.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.