ClawHub
Back to skill

Security audit

A Stock Trading Assistant

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only A-share stock analysis helper with disclosed financial-advice limits and no bundled code, credentials, or account access.

Install this only if you want an A-share-focused analysis assistant. Verify any helper scripts before running them because they were referenced but not included in the reviewed artifact, review saved watchlist entries if you use alerts, and treat buy/sell or position-size suggestions as informational rather than guaranteed financial advice.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger phrase 'or any A-share trading-related query' is overly broad and can cause the skill to activate for loosely related financial conversations beyond its intended scope. In a trading context, unintended invocation increases the chance of users receiving domain-specific financial guidance when they did not explicitly request this skill, which can lead to inappropriate or misleading investment advice.

Natural-Language Policy Violations

Medium
Confidence
83% confidence
Finding
The manifest hard-codes a mainland China A-share-only scope and says other markets will be automatically ignored, which can override user intent without confirmation. This is risky because users asking comparative or cross-market questions may receive incomplete answers or have relevant context silently discarded, especially in financial decision-making scenarios.

Natural-Language Policy Violations

Medium
Confidence
81% confidence
Finding
The role definition enforces a fixed market/locale constraint without user opt-in, which can bias responses and suppress valid user needs outside that scope. In a stock-trading assistant, silently constraining analysis to one market is operationally unsafe because omitted market context can materially affect investment interpretation.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.