ClawHub
Back to skill

Security audit

classify-iab-enriched

Security checks across malware telemetry and agentic risk

Overview

The artifact appears to be a coherent ClawHub/OpenClaw development repository with bundled project skills and disclosed operational tooling, not a hidden or deceptive skill package.

Before installing, review which bundled skill you actually need. If you use the Axiom/Sentry/Slack workflows, provide least-privilege API tokens, keep local config files private, and be aware that org memory sharing can push selected operational notes to a configured Git repository.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.