ClawHub
Back to skill

Security audit

TRPG Check Numeric Balance

Security checks across malware telemetry and agentic risk

Overview

This skill only guides an agent to review TRPG rule numbers for balance and does not request sensitive access, persistence, or unsafe actions.

Install only if you are comfortable with a Chinese-language workflow or can ask the agent to respond in your preferred language. Expect it to read relevant TRPG rule files to assess balance, but it should not modify files or access credentials.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
The skill body is written entirely in Chinese and instructs the agent to operate in that language without giving any mechanism to adapt to the user's language. This can cause the agent to ignore user language preferences, reduce transparency, and make outputs inaccessible or harder to validate for non-Chinese-speaking users, which is a policy/compliance and usability risk rather than a direct code-execution issue.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.