ClawHub

Marketing Copywriting

Security checks across malware telemetry and agentic risk

Overview

This is a text-only marketing copywriting skill with overly broad business wording, but it does not install code, request credentials, persist data, or take actions.

Install only if you want a prompt aid for marketing copy, emails, promotional text, and rewrites. Avoid pasting confidential business documents, budgets, regulatory records, or sensitive customer data unless necessary, and have qualified experts review any legal, compliance, financial, or strategic claims.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The description is extremely broad and generic, describing general business and operational help rather than tightly scoping the skill to marketing copywriting. In agent environments, vague descriptions can cause unintended routing or activation, exposing unrelated user data to a skill that was not meant to handle it and increasing the chance of off-purpose actions.

Vague Triggers

Medium
Confidence
94% confidence
Finding
The use-case section is so generic that it positions the skill as applicable to broad business operations, vendor management, strategic decisions, and performance monitoring instead of a constrained copywriting function. This increases the risk that an orchestrator or user invokes the skill in inappropriate contexts, leading to misrouting, over-collection of sensitive business information, or reliance on a copywriting skill for decisions it is not designed to support.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal