ClawHub
Back to skill

Security audit

Technical Analyst Lite

Security checks for vulnerabilities and agentic risk

Overview

This skill is a read-only chart-analysis prompt with no code or credential access, but its trading-oriented output should be treated as informational only.

Install only if you are comfortable using AI-generated chart commentary as educational market analysis, not financial advice. Do not rely on it as the sole basis for trades, and avoid uploading screenshots that reveal account balances, positions, or other private financial details.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill gives trading-oriented guidance such as favorable or unfavorable entry risk/reward framing before prominently presenting uncertainty, limitations, or a strong non-advisory caution. That can cause users to over-trust the output as actionable financial guidance, especially because the format appears systematic and authoritative.

Static analysis

No suspicious patterns detected.