ClawHub
Back to skill

Security audit

Discount Impact Calculator

Security checks across malware telemetry and agentic risk

Overview

This skill is a markdown-only discount calculator that asks for business assumptions and produces analysis, with only a minor language-accessibility issue.

Reasonable to install if you want a promotion-economics helper. Be aware it may start by asking questions in Chinese, and review any generated Python script before running it, especially if your inputs include confidential pricing, margin, refund, or acquisition-cost data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
92% confidence
Finding
The skill explicitly instructs the agent to begin the interaction in Chinese and does not offer a user language choice. This can cause user confusion, reduce accessibility, and lead to incorrect use of the skill if the user cannot understand the prompts or assumptions being collected.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.