ClawHub
Back to skill

Security audit

paywalls

Security checks across malware telemetry and agentic risk

Overview

This is a paywall-design guidance skill with no executable code, but users should handle its payment-flow suggestions with normal payment-security safeguards.

This skill is reasonable to install for paywall and upgrade-flow advice. Before applying payment-related suggestions such as one-click upgrade or pre-filled payment information, make sure your implementation uses a PCI-compliant processor, avoids storing raw card details, and gives users clear confirmation before any charge.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
85% confidence
Finding
The invocation description is unusually broad and includes many generic product, pricing, and conversion-related phrases, which can cause the skill to activate outside its intended narrow scope of in-app paywalls. Over-broad routing is dangerous because it can override a more appropriate specialized skill, leading to irrelevant guidance, context leakage into the wrong workflow, or degraded system behavior through misclassification.

Missing User Warnings

High
Confidence
90% confidence
Finding
Recommending pre-filled payment info for returning users touches highly sensitive financial data and can encourage insecure storage, overbroad retention, or unsafe autofill patterns if implemented naively. In a paywall skill, this is more dangerous because the surrounding goal is conversion optimization, which can pressure implementers to reduce friction without adequate safeguards around payment tokenization, re-authentication, and consent.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.