ClawHub
Back to skill

Security audit

Finance Recruitment Jd

Security checks across malware telemetry and agentic risk

Overview

This is a narrow finance job-description helper, with only a minor caveat that broad HR trigger words could activate it unexpectedly.

Install this only if you want help drafting finance recruitment job descriptions. Prefer explicit prompts such as generating a finance JD for a named role, and review outputs for accuracy, bias, and legal or HR compliance before use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger keywords are broad, generic HR terms such as 招聘JD, 职位说明书, 岗位要求, and 任职资格, which are likely to appear in ordinary conversation. In an agent environment, this can cause accidental invocation of the skill in unrelated HR or recruiting discussions, leading to unintended behavior, context leakage into the skill, or confusing outputs.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal