ClawHub
Back to skill

Security audit

Construction Cost Calculator

Security checks across malware telemetry and agentic risk

Overview

This skill is a construction cost-estimation guide with no evidence of hidden access, persistence, or unsafe automation.

This appears reasonable to install for construction cost-estimation assistance. Be aware it may activate on broad cost or budget keywords, and verify any pricing, tax-rate, or quotation advice against current local rules and your own project data before relying on it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger list uses broad business topics such as 成本测算、成本分析、项目利润、预算书 that can match many ordinary construction or finance conversations. This can cause unintended activation, pulling the skill into contexts where the user did not explicitly request it and increasing the risk of irrelevant, confusing, or policy-bypassing behavior through overbroad routing.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.