ClawHub
Back to skill

Security audit

job-analysis-design

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only Chinese study helper for job analysis, with no evidence of unsafe behavior.

Install this only if you want a Chinese-language study aid for Job and Work Analysis Chapter 7. Treat legal, compensation, and HR content as educational rather than professional advice, and be aware that the marketplace capability tags appear inaccurate for this package.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger guidance includes very broad natural-language conditions such as helping with Chapter 7, discussing multiple common HR topics, and general phrases like how job analysis serves HR purposes. In a conversational agent, overly broad triggers can cause the skill to activate on ordinary discussion that only partially matches the intended scope, leading to unintended routing, context hijacking, or suppression of a more appropriate skill.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.