Security audit
Keenable
Security checks across malware telemetry and agentic risk
Overview
The package is a disclosed ClawHub registry CLI whose file, network, token, and mutation capabilities match its stated purpose.
Before installing, understand that this is a powerful registry CLI: it can store a ClawHub token, upload selected local files when publishing, install or overwrite skill folders, and delete or transfer registry resources when you run those commands. Use the default ClawHub registry unless you intentionally trust an override, and keep API tokens scoped and revocable.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.