ClawHub
Back to skill

Security audit

OnePilot CLI

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed OnePilot integration that stores a local token and sends user-approved event, memory, feedback, application, and organizer requests to OnePilot services.

Install only if you want this agent connected to OnePilot. Expect it to save a local OnePilot token, contact OnePilot cloud for recommendations and account actions, and send memory, feedback, issue reports, application answers, or organizer data only after you approve those actions. Review issue details before reporting bugs, since diagnostic metadata may include the local skill path.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The issue reporting path automatically includes local metadata such as agentLabel and skillDir in the outbound request metadata, and it also merges arbitrary caller-supplied metadata without any user-facing notice or consent gate in this code path. This can disclose local filesystem structure or other sensitive operational details to the remote service, especially when users or higher-level agents invoke issue reporting to share errors verbatim.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.