Security audit
Google Calendar
Security checks across malware telemetry and agentic risk
Overview
The skill set includes some powerful maintenance workflows, but the artifacts disclose them clearly and require user/operator confirmation for high-impact actions.
Install only if you expect ClawHub/Convex operator workflows. Several skills can guide an agent through production data changes, moderation actions, PR comments, and outbound email, so keep normal admin credentials protected and require the documented confirmations before any write, send, ban, delete, transfer, or production apply step.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.