ClawHub
Back to skill

Security audit

Linear

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Linear API integration that uses Maton OAuth/CLI by default and gives clear user-control guidance for connections and writes.

Install only if you are comfortable granting Maton-mediated access to your Linear workspace. Prefer OAuth through the Maton CLI, confirm any connection creation or write action before it runs, specify the intended connection/account when multiple exist, and avoid the raw MATON_API_KEY fallback unless the CLI cannot be used.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
Everything above uses the CLI, which holds the credential itself and never exposes it to the caller. Use the raw HTTP form below **only** where the CLI cannot be installed — a locked-down container, a CI step, a sandbox with no package manager. If `maton` is available, `maton api` does the same job without handling a secret.

Calling `https://api.maton.ai/` directly means holding a long-lived Maton API key in the process environment, where it is readable by every child process and easy to leak into logs, crash dumps, shell history, and pasted output. Handle it accordingly:

- **Never print, echo, or log the key**, and never include it in output shown to the user. Check for presence, never for value:
Confidence
78% confidence
Finding
The appendix documents a fallback mode that uses a long-lived `MATON_API_KEY` in the process environment and demonstrates direct transmission to `https://api.maton.ai/`. Although the text includes strong handling warnings, this mode materially increases secret-exposure risk because environment variables can leak to child processes, logs, crash dumps, or misconfigured tooling in agent/runtime environments.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.