ClawHub
Back to skill

Security audit

Munger Think Partner

Security checks across malware telemetry and agentic risk

Overview

This is a text-only Munger-style decision framework skill with no executable behavior or data access, but users should treat its financial and career guidance as educational only.

Install only if you want a Munger-style checklist for thinking through decisions. For investments, business commitments, career changes, or similar high-stakes choices, verify current facts independently and consult qualified professionals before acting.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The activation phrases are very broad everyday questions about decisions, risk, and reflection, so the skill could be invoked in contexts far beyond investing or structured reasoning. That increases the chance of unsolicited financial, career, or psychological-style guidance being applied where the user did not explicitly ask for this framework, creating scope creep and inappropriate reliance.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill provides investment, business, risk, and career guidance but lacks a clear disclaimer that outputs are informational and not a substitute for licensed financial, legal, or career advice. In practice, users may over-trust the structured recommendations and make consequential decisions without appropriate professional review.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.