Security audit

Claude Clarity

Security checks across malware telemetry and agentic risk

Overview

This is a broad local cognitive-memory skill that is intrusive by design, but its high-impact behavior is mostly disclosed and purpose-aligned.

Install only with the expectation that it will alter local agent configuration and add a persistent local memory/MCP layer. Review the settings.json and CLAUDE.md changes, keep network and code-execution related options disabled unless intentionally needed, and treat the strong persona behavior as part of the skill’s design.

SkillSpector

By NVIDIA

SkillSpector could not complete.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: malicious.crypto_mining, suspicious.dangerous_exec, suspicious.dynamic_code_execution (+1 more)

Possible crypto mining behavior detected.

Critical

Code: malicious.crypto_mining
Location: src/core/code/code-executor.js:95

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: bin/ensure-mcp.js:87

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/core/code/code-engine.js:77

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/core/code/code-executor.js:345

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/core/code/code-verifier.js:143

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: src/core/code/code-engine.js:1599

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/core/code/code-planner.js:1664

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/core/intent-layer.js:60

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/core/search/hybrid-search.js:52