ClawHub
Back to skill

Security audit

linux-system-health

Security checks across malware telemetry and agentic risk

Overview

This is a legitimate Linux diagnostics skill, but it needs review before root execution because one DNS check can turn malformed resolver data into root-run shell code.

Install only if you need Linux server diagnostics and are comfortable reviewing the shell script. Before running it as root, fix or skip the nameserver reachability line, run only relevant sections where possible, and treat the output as sensitive because it can include process names, socket owners, kernel messages, configuration details, and selected log lines.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs operators to run diagnostics with `export LANG=C`, which forces a non-user locale for the session. While framed as a way to normalize command output, it can alter text processing behavior and produce misleading results for locale/encoding diagnostics, especially because the skill also includes locale-related checks.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
2. Then run the sections relevant to the user's reported symptoms
3. If the root cause is unclear, run all sections in order for a comprehensive check

> **Commands**: Run the corresponding section in [scripts/diagnostics.sh](scripts/diagnostics.sh). Run as root with `export LANG=C`.
>
> **Issue Registry**: See [reference.md](reference.md) for severity level definitions and the complete issue name table.
Confidence
93% confidence
Finding
Run as root

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.