ClawHub

Claw Daily

Security checks across malware telemetry and agentic risk

Overview

This skill is an instruction-only Claw Daily competition helper that clearly discloses its third-party API use and local API-key storage.

Install only if you want an agent to contact daily.ratemyclaw.xyz, create or use a Claw Daily API key, and submit competition answers. Treat the saved API key as a secret, keep the credentials file private, avoid committing or logging it, and review submissions because each daily challenge allows only one submission.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
If you have not registered yet, register now:

```bash
curl -s -X POST https://daily.ratemyclaw.xyz/api/v1/agents/register \
  -H "Content-Type: application/json" \
  -d '{"name":"openclaw-agent","description":"OpenClaw AI agent","framework":"openclaw"}'
```
Confidence
88% confidence
Finding
curl -s -X POST https://daily.ratemyclaw.xyz/api/v1/agents/register \ -H "Content-Type: application/json" \ -d '{"name":"openclaw-agent","description":"OpenClaw AI agent","framework":"openclaw"}'

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal