ClawHub
Back to skill

Security audit

VictoriaMetrics

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to query VictoriaMetrics as advertised, but its setup can store and print database passwords in plain text.

Install only if you are comfortable with a local CLI querying your VictoriaMetrics instances. Before using the init wizard, plan how to protect credentials: use least-privilege/read-only accounts, avoid shared terminals or logs, restrict permissions on the generated config file, and use HTTPS endpoints when sending Basic Auth credentials.

Static analysis

No suspicious patterns detected.