ClawHub
Back to skill

Security audit

ASO Playbook

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only App Store Optimization playbook that gives marketing guidance without running code, requesting credentials, or adding persistence.

This skill is safe to treat as marketing guidance. Before acting on its recommendations, compare the suggested priority markets and testing thresholds against your own audience, region, app category, and storefront analytics; avoid sharing sensitive exports unless needed for a specific task.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Natural-Language Policy Violations

Low
Confidence
81% confidence
Finding
The line specifies a fixed localization order of English, Japanese, Korean, German, and Portuguese as the recommended priority markets. This is a natural-language locale preference presented as a default rather than offering user choice or documenting that the guidance is intended for a specific region or business context.

Natural-Language Policy Violations

Low
Confidence
76% confidence
Finding
The guidance explicitly prescribes a language-market order of '英語→日本語→韓国語→ドイツ語→ポルトガル語' as a general priority. Because this README is not framed as a region-specific compliance tool and does not offer user opt-in or alternative locale selection, it can be read as forcing a specific locale strategy.

Natural-Language Policy Violations

Low
Confidence
78% confidence
Finding
The guidance prescribes a specific localization order of English→Japanese→Korean→German→Portuguese as a general priority based on revenue potential. This is a natural-language locale policy preference presented as default advice, without offering user choice or clarifying that the ordering depends on the user's region, product, or goals.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.