Suspicious: claudeos - CLAUDE.md | Skillgate

Skillgate scanned agents/cleanup-automator/CLAUDE.md in claudeos and rated it Suspicious with a risk score of 62/100 (4 detections).

Skillgate found behaviour that needs a human decision: it may be a legitimate but powerful pattern, or an attack. Review the flagged lines in the source before installing.

What was found

• SG-020 Persistence Mechanism - CRITICAL: Crontab, rc files, systemd, LaunchAgents, SSH key injection, registry run keys
• SG-028 File Exfiltration - HIGH: Bulk file reads, credential file access, data staging via tar/zip/rsync/S3 upload
• SG-019 Environment Probing - MEDIUM: System enumeration commands: whoami, uname, env dump, process listing, cloud IMDS probes
• SG-087 External binary/archive payload reference - MEDIUM: Instruction in a markdown/agent-config file routes the agent to extract or execute content from a binary/archive sibling whose contents are not visible to this scan. Indirection itself is signal; manual review of the referenced file is advised.

What to do

Read the flagged lines in the source file yourself before installing it or letting an agent load it. Every detection above links to the rule that fired, with the conditions that trigger it and remediation where one exists. Open the interactive report for evidence lines and context.

About Skillgate

Skillgate is a free scanner from Mitiga Labs for AI agent skills, hooks, MCP configs, and instruction files (SKILL.md, CLAUDE.md, AGENTS.md, .cursorrules, .claude/settings.json). It runs static rules plus an LLM judge and maps each finding to a known attack technique. Static analysis only: it never executes the file it scans. No scanner is 100% accurate - a verdict is a signal, not a guarantee. Browse all detection rules.