ClawHub
Back to skill

Security audit

Zero-Sum Game

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only strategy-analysis skill with no executable code, persistence, credential access, or hidden system access.

Installing this skill should only affect how an agent reasons about strategy and negotiation questions. Users should still review important business, policy, or financial recommendations before acting, but the artifact itself does not add operational authority or sensitive access.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- International Energy Agency (2025). *Energy and AI* (World Energy Outlook Special Report), published April 2025. IEA, Paris. Documents the 2024–2025 scale-up of AI compute and data-center demand, and the physical constraints (power, hardware supply, lead times) that bound near-term capacity — useful for grounding the "near-term compute is a fixed input" side of the AI zero-sum diagnosis. https://www.iea.org/reports/energy-and-ai
- Stanford HAI (2025). *Artificial Intelligence Index Report 2025,* published April 2025. Stanford Institute for Human-Centered AI. Tracks model performance, investment, adoption, and compute trends through 2024 — the widely cited public baseline for the state of AI competition, capital expenditure, and the concentration of frontier capability and talent. https://hai.stanford.edu/ai-index/2025-ai-index-report

**What is not cited and why:** Popular business writing frequently attributes the phrase "zero-sum game" to competitive strategy without checking whether the specific situation meets the mathematical definition. Claims that "competition is always zero-sum" or "negotiation is always zero-sum" are asserted but unverified. This skill uses the mathematical definition from Von Neumann and Morgenstern as the anchor, not intuitive usage.
Confidence
22% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Static analysis

No suspicious patterns detected.