ClawHub

15-Min BTC Sentiment

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only BTC/Kalshi sentiment helper with no code or credential handling, but it is explicitly wagering-focused and should be used cautiously.

Install only if you deliberately want short-horizon BTC/Kalshi betting guidance. Do not let an agent place real bets automatically, do not treat the output as financial advice, verify live market data independently, and consider legal, platform, and loss-risk limits before using it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger description is broad enough to activate on generic short-term BTC or trading-related requests, which can cause the agent to deliver highly specific gambling-oriented guidance outside a narrowly intended use case. In a financial and betting context, overbroad routing increases the chance of unsafe, overconfident advice being surfaced when the user did not explicitly request this specialized workflow.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The instruction to use the skill any time the user asks for short-term outlook or Kalshi bet advice is ambiguous and lacks exclusions, so the skill may be invoked for generalized betting recommendations rather than narrow market summarization. Because the skill is explicitly optimized for rapid wagering decisions, ambiguous activation materially raises the risk of the agent steering users toward speculative bets without sufficient context or safeguards.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
This section directly supports wagering behavior by prescribing bankroll rules, bet sizing, target win rate, and conditions for placing bets, but it provides no user-facing warning about financial risk, uncertainty, or the possibility of loss. In context, this is more dangerous because the entire skill is framed as a fast decision aid for 15-minute Kalshi bets, which can encourage impulsive gambling behavior under a veneer of disciplined process.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal