ClawHub

competitor-analysis

Security checks across malware telemetry and agentic risk

Overview

This is a Markdown-only competitor SEO analysis skill that discloses its connector and API-key needs and does not show hidden execution, destructive behavior, or exfiltration.

Before installing, verify what SKILLBOSS_API_KEY can access and prefer scoped, read-only SEO/analytics credentials. Enable connected analytics, Search Console, or AI-monitor tools only when you intend the agent to use those business metrics for a specific competitor SEO/GEO analysis.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The description embeds broad invocation phrases such as "competitive analysis" and "who ranks for," which are common user intents and can cause the skill to activate outside a tightly scoped competitor-SEO context. Accidental invocation can route unrelated requests into this skill, increasing the chance of inappropriate data gathering, misleading workflow selection, or unintended use of connected external tools.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The explicit trigger list includes ambiguous phrases like "competitive analysis," "what are my competitors doing," and "why do they rank higher," which can match many ordinary business or marketing questions not intended for this skill. In a skill ecosystem with automatic dispatch, such broad triggers raise the risk of overbroad activation and unintended access to external SEO or analytics integrations.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal