ClawHub
Back to skill

Security audit

Paywall

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only paywall optimization guide with no code or permissions, though its persuasive marketing advice should be applied transparently and lawfully.

Before installing, understand that this skill gives conversion-focused paywall advice, not legal or compliance review. Use tactics such as annual defaults, decoy pricing, urgency, discounts, user counts, ratings, and testimonials only with truthful claims, clear total pricing and billing terms, visible cancellation and dismiss options, app-store compliance, and documented consent for any real names, photos, likenesses, or customer logos.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The guidance explicitly recommends testimonial cards with real names and photos but does not mention obtaining informed consent, honoring publicity/privacy rights, or complying with data protection obligations. In a paywall optimization skill, this omission is materially risky because teams may operationalize persuasive social proof patterns quickly and reuse personal data in marketing without a lawful basis or adequate disclosure.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.