Security audit
Content Forge
Security checks across malware telemetry and agentic risk
Overview
The skill content is coherent and mostly consists of disclosed ClawHub maintenance workflows, including high-impact moderation commands that are guarded by explicit user confirmation and existing auth checks.
Install only if you are comfortable giving the agent ClawHub staff-operation guidance. The moderation skill can direct authenticated users to make real account and catalog changes, so use it with staff credentials only when the target and reason are clear.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.