ClawHub
Back to skill

Security audit

trading-tactics-checklist

Security checks across malware telemetry and agentic risk

Overview

This is a non-executable trading checklist skill whose financial guidance is purpose-aligned, though users should treat it as educational rather than personalized advice.

Install only if you want an educational trading-process checklist. Do not treat its outputs as personalized financial advice or a signal to trade; confirm suitability, risk, position sizing, and legal or tax implications independently before acting.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger list includes very broad phrases such as 'trading strategy', 'timing', 'plan', and related generic market terms, making accidental activation likely in ordinary finance discussions. In an agent setting, unintended activation can cause the model to inject detailed trading tactics or procedural advice when the user did not explicitly request this skill, increasing the chance of inappropriate financial guidance and cross-skill misrouting.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
This section gives actionable trade-entry and position-management steps, including how to split entries, identify entry zones, and finalize stop/target plans, but does not warn that the content is general education rather than personalized financial advice. In a trading context, omission of that boundary makes it easier for users to treat the output as direct investment instruction, which can lead to harmful financial decisions.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The skill’s activation scope is described with many loosely related trigger phrases and only a few example prompts, which can cause over-broad routing into this skill. In a trading context, misrouting is meaningful because users asking about trend direction or risk sizing may receive timing/checklist guidance instead of the more appropriate specialized skill, increasing the chance of unsuitable financial guidance.

VirusTotal

50/50 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.