ClawHub
Back to skill

Security audit

China Insurance Actuarial Pricing Expert

Security checks across malware telemetry and agentic risk

Overview

This skill is a reference-only China insurance actuarial pricing guide, with no executable behavior and clear warnings that professional review is required.

Install only if you need China-focused actuarial pricing reference material. Treat its calculations and regulatory summaries as starting points, verify current official rules and assumptions, avoid entering undeidentified policyholder or health data, and have a qualified actuary review any real-world output.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
89% confidence
Finding
The skill explicitly marks Chinese triggers as 'preferred' without any user opt-in, which can cause the agent to bias language selection and routing behavior based on embedded skill instructions rather than the user's stated preference. While not a code-execution issue, this can override expected interaction boundaries and create unfair or confusing behavior for users who did not request Chinese-language prioritization.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.