ClawHub
Back to skill

Security audit

Security Digital Human Ops

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only planning aid for digital-human marketing content, with no hidden access, installation, persistence, or data-handling behavior found.

Install this if you want assistance drafting digital-human scripts and content plans for financial marketing. Be aware it may activate on some general marketing requests due to broad keywords, and review any bank, insurance, investment, or promotional language for regulatory compliance before use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger list is broad and includes generic terms like content marketing, 内容创作, and 短视频, which can match many unrelated user requests and cause unintended invocation of this skill. In a financial-marketing context, accidental routing is more concerning because it may steer users toward regulated promotional content or inappropriate advice workflows when they did not request them.

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

No suspicious patterns detected.