ClawHub
Back to skill

Security audit

Trust Brand Architecture

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only business strategy skill with no executable code, persistence, credential access, or hidden data handling.

This skill appears safe to install as a brand-trust coaching framework. Users should treat it as advisory business guidance and confirm fit before using it for broad marketing problems or active legal/crisis situations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The activation criteria include broad natural-language triggers such as 'how do we build brand trust?' and 'why isn't our marketing working?', which are common business questions and could cause the skill to activate in situations outside its intended scope. This can lead to inappropriate routing or overuse of this framework, especially when a more specific skill or immediate crisis/legal handling would be more appropriate.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.