Skills/ClawHub/agent-bom-vulnerability-intel

agent-bom-vulnerability-intel@0.110.0

VERIFIED

Publisher claims: "Use agent-bom to check package, SBOM, inventory, and agent dependency exposure against OSV, GitHub Security Advisories, NVD, EPSS, and CISA KEV with explicit data-boundary choices. Use when a user asks for CVE lookup, advisory intelligence, exploitability context, fix versions, GHSA/OSV/NVD enrichment, or package vulnerability triage." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher msaad00 · joined 1 days agoInstalls 3,341Last detonated 29 h ago
$npx skills add agent-bom-vulnerability-intel
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionSKILL.md:129 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:139 · File type combined with upload action — agent may exfiltrate local data files
AST07