ClawHub

Macro Regime Detector

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a simple macro and crypto market analysis prompt, with no evidence of hidden execution, data theft, persistence, or privileged access.

Install only if you want general macro and crypto sentiment analysis. Do not treat its long/short or portfolio-positioning output as personalized financial advice, and verify market data independently before making investment decisions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill description is broad enough to trigger on generic investing, portfolio positioning, and crypto market context queries rather than a narrowly scoped macro-regime classification task. That increases the chance the skill is invoked in situations where users are effectively seeking actionable financial advice, creating overreach, misrouting, and potentially unsafe recommendations outside the intended analytical scope.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The example triggers 'What macro regime are we in?' and especially 'Should I be long or short crypto right now?' are general prompts that blur the line between market analysis and direct trading advice. In this skill context, that makes the routing behavior more dangerous because the skill explicitly returns a positioning recommendation, which can cause the agent to provide broad but actionable financial guidance without sufficient safeguards or constraints.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal