ClawHub

primevue

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only PrimeVue skill with component examples and no evidence of hidden execution, persistence, or data access.

Before installing, treat this as a PrimeVue reference skill: it may lead your agent to install PrimeVue packages for a Vue project, but it does not need OAuth credentials despite the metadata tag. Only approve package installation or project edits when they match your intended Vue UI work.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Session Persistence

Medium
Category
Rogue Agent
Content
```vue
<Stepper value="1">
    <StepList>
        <Step value="0">Step 1</Step>
        <Step value="1">Step 2</Step>
        <Step value="2">Step 3</Step>
Confidence
75% confidence
Finding
pList

Session Persistence

Medium
Category
Rogue Agent
Content
<Step value="0">Step 1</Step>
        <Step value="1">Step 2</Step>
        <Step value="2">Step 3</Step>
    </StepList>
    <StepPanels>
        <StepPanel value="0">Content 1</StepPanel>
        <StepPanel value="1">Content 2</StepPanel>
Confidence
75% confidence
Finding
pList

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal