ClawHub
Back to skill

Security audit

vmware-nsx-security

Security checks across malware telemetry and agentic risk

Overview

This skill is a clearly scoped VMware NSX security tool, but it can make live firewall and tag changes, so it should be installed only with deliberate NSX credentials and approval practices.

Install this only for operators who are allowed to administer NSX security. Prefer a dedicated least-privilege NSX account, use read-only RBAC for inspection-only use, avoid making production the default target unless intentional, and use a secret manager or injected environment variables instead of a persistent .env file when possible.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The activation text uses a broad catch-all trigger ('any NSX security / vDefend / DFW task') that can cause the agent to invoke this skill for a very wide set of requests, including ambiguous ones with write capability. In this skill’s context, that matters because the toolset includes firewall policy/rule creation and deletion, so over-routing can increase the chance of unintended security changes.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The guide explicitly instructs users to configure an NSX admin account with DFW read/write permissions and even defaults to a production target, but it does not prominently warn that the tool can make live, state-changing firewall and security-policy changes. In this skill context, that omission matters because accidental or misunderstood use against production NSX can disrupt segmentation, block traffic, or weaken security controls.

Credential Access

High
Category
Privilege Escalation
Content
All checks should show PASS:
- Config file
- .env permissions (owner-only 600)
- Config parse (N targets configured)
- Password (set for each target)
- Network (TCP reachable on port 443)
Confidence
88% confidence
Finding
The setup guide encourages storing NSX passwords in a local `.env` file for targets that may include production, which creates a credential-at-rest exposure on the workstation running the agent. Although the guide recommends restrictive permissions and notes that base64 is only obfuscation, compromise of the user account, backups, shell tooling, or editor history could expose privileged NSX credentials that can alter firewall and IDS/IPS policy.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.