ClawHub
Back to skill

Security audit

Real Estate — Sphere-of-Influence Referral Ladder

Security checks across malware telemetry and agentic risk

Overview

This is a narrow real-estate referral-nurture guidance skill with no executable code, persistence, credential use, or hidden high-impact behavior.

Before installing, confirm you want a real-estate-specific past-client and referral workflow. If you use it with a CRM or content-calendar agent, keep control over what contact data is shared and which actions are allowed.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The activation criteria are broad business phrases like wanting repeat/referral business, asking where the next deal will come from, or having an idle database. Because these overlap with common sales and CRM discussions, the skill may trigger in situations where the user did not specifically intend a real-estate sphere-of-influence workflow, causing mis-scoped guidance or unintended autonomous behavior.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.