ClawHub

Stock Investment System

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only stock analysis framework that gives concrete investment guidance, so the main risk is financial overreliance rather than hidden system access.

Install only if you want an investment-analysis framework. Treat its outputs as educational decision support, verify all market data independently, and do not rely on its thresholds or example position sizes as personalized financial advice.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The file gives explicit investing action thresholds such as '至少四层🟢才动手' and concrete buy/add/reduce position rules, but it does not warn users that this is not financial advice or that applying the framework can cause financial loss. In this context, the omission is meaningful because the skill is positioned as an investment decision system and may encourage users to rely on deterministic signals, including speculative inputs like 奇门遁甲, when making real trades.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The file gives concrete investment actions, position-sizing guidance, and a stop-loss level without any visible warning that the content is not personalized financial advice or that users must assess their own risk tolerance. In a skill explicitly designed for investment decision support, this can cause users to over-trust the output as authoritative and act on risky recommendations unsuited to their financial situation.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal