ClawHub
Back to skill

Security audit

Buffett Perspective

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only investing-analysis persona skill with no code execution, data access, persistence, or hidden privilege behavior.

Installers should understand that this skill may shape financial conversations toward Buffett-style value-investing analysis, and its broad triggers could activate without an explicit persona request. It should not be treated as professional financial advice or an instruction to trade.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: buffett-perspective
description: 巴菲特投资思维视角。当用户请求投资分析、股票估值、企业护城河判断、并购思维、所有者视角分析时触发。触发词：「巴菲特视角」「巴菲特会怎么看」「护城河」「用巴菲特的方式」「切换到巴菲特」「价值投资」。
---

# 巴菲特视角 | Buffett Thinking OS

## 触发词

"巴菲特视角"、"巴菲特会怎么看"、"护城河"、"用巴菲特的方式"、"切换到巴菲特"、"价值投资"、"所有者思维"

## 核心原则

**买股票就是买企业的一部分。** 不要买股票，要买�

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill uses several broad trigger phrases such as “护城河” and “价值投资” that can appear in ordinary financial discussions, increasing the chance of unintended activation. While this is not an exploit by itself, over-broad routing can cause the wrong skill to take over a conversation and influence outputs in contexts where the user did not explicitly request this persona or framework.

Content

No source excerpt is available for this finding.