Security audit
Public Relations Manager
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed ClawHub/Convex maintainer skill bundle whose powerful actions are task-specific and guarded rather than hidden.
Install only if you expect ClawHub maintainer and Convex development workflows. Before running moderation, PR publishing, production deploy, or migration commands, verify the target, account, deployment, and auth context. For local code review in sensitive repositories, consider using the autoreview helper's --no-yolo option or limiting fallback reviewer CLIs because diffs may be sent to external review tools.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.