ClawHub

Commercial Appraisal Narrative Drafter

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed draft-only commercial appraisal report helper with no executable code, persistence, or hidden data movement.

Install only if you need a U.S.-or-USPAP-oriented commercial appraisal drafting workflow. Treat generated reports as drafts: a qualified signing appraiser must verify jurisdiction, USPAP edition, comparables, confidential client data, assumptions, and final value conclusions before any external use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Natural-Language Policy Violations

Low
Confidence
77% confidence
Finding
The markdown sets USPAP 2026–2027 and the United States as defaults, which imposes a specific jurisdictional framework before confirming the user's locale or governing standard. While it does ask for confirmation for non-U.S. assignments, the initial default still encodes a locale-specific policy that may not fit users outside that context.

Scope Creep

Low
Category
Excessive Agency
Content
### Step 13: USPAP Certification

Draft the certification per USPAP Standards Rule 2-3 (paraphrased — verify against current USPAP text). The statements include (but are not limited to):

- The statements of fact are true and correct.
- The reported analyses, opinions, and conclusions are limited only by the reported assumptions and limiting conditions and are the appraiser's personal, impartial, and unbiased professional analyses, opinions, and conclusions.
Confidence
70% confidence
Finding
not limited to

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal