ClawHub

AI市场调研与竞品分析助手

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only market research helper; its broad triggers and external research workflow deserve user awareness but do not show malicious or materially mismatched behavior.

Install if you want a structured market-research assistant. When using it, give explicit scope, avoid sharing confidential business plans or unpublished research unless appropriate, require citations and dates, and ensure any paid or restricted databases are accessed lawfully.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger list uses very broad, common market-research phrases such as '市场调研', '行业分析', and '技术趋势', which are likely to appear in ordinary user requests and can cause the skill to activate unintentionally. Over-broad activation increases the chance that the skill intercepts unrelated conversations, leading to inappropriate tool use, confusion, or unintended data collection and processing.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The description says the skill should trigger whenever users need technical market analysis, competitor research, trend forecasting, user profiling, or industry data collection, but it does not define boundaries for when the skill should stay inactive. This ambiguity can cause over-triggering in normal analytical discussions, making the agent invoke the skill in contexts where the user did not explicitly request a structured market-research workflow.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal