ClawHub
Back to skill

Security audit

未来预测师

Security checks across malware telemetry and agentic risk

Overview

This is a static trend-forecasting guide with no code or system access; the main caution is to treat investment predictions as informational.

Installers should understand that this skill provides Chinese-language trend and investment-oriented analysis templates, not guaranteed financial advice. Ask the agent to respond in your preferred language if needed, and independently verify any investment decisions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
93% confidence
Finding
The skill content, schema, and all examples are written exclusively in Chinese and do not provide any instruction to adapt to the user's preferred language. This can cause language-locking behavior where the agent responds in Chinese even when the user expects another language, reducing usability and potentially causing misunderstanding in investment-related discussions.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.