ClawHub
Back to skill

Security audit

Arrow's Information Paradox

Security checks across malware telemetry and agentic risk

Overview

This is a text-only business strategy skill for planning how to disclose proprietary information safely, with no executable behavior or hidden access requests.

Install if you want structured strategy guidance for pitches, licensing, M&A diligence, or consulting sales involving proprietary information. Treat the NDA, patent, escrow, and disclosure-ladder advice as planning support rather than legal advice, and avoid giving any agent unnecessary trade secrets unless they are needed for the specific task.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- The reproducible core (the thing a competitor could copy) is scheduled for an *early*, low-commitment disclosure rung.
- An NDA is being treated as full protection, with no defense against independent reinvention or an enforcement plan.
- A "demo" or "trial" would require handing over real access, source, or the full method rather than demonstrating outcomes.
- The patent-vs-secret choice is being made by default or habit, without asking whether the advantage is reverse-engineerable and how long it will last.
- The buyer keeps asking to advance disclosure "to build the relationship" while making no reciprocal commitment — and the seller is tempted to comply.
- As a buyer: you are being asked to pay on the seller's word, with no intermediary certification, escrow, or verifiable proxy for what is withheld.
Confidence
75% confidence
Finding
without asking

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.