AANA Financial Safety Router Skill

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:44 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only financial safety guardrail that does not run code, store data, or request credentials.

Install this if you want finance-related answers to be more cautious and privacy-preserving. Expect it to ask for missing facts, avoid guarantees, use current or trusted sources when needed, redact sensitive financial details, and defer personalized tax, legal, investment, debt-crisis, or other high-impact decisions to qualified professionals.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The phrase "Use this skill when an OpenClaw-style agent may answer, summarize, draft, recommend, rank, or route ... other personal-finance questions" covers an extremely broad set of activities and ends with the catch-all "other personal-finance questions." For a markdown skill file, this lacks clear trigger boundaries or exclusion conditions and could cause unintended activation on routine, low-risk finance mentions.

VirusTotal

62/62 vendors flagged this skill as clean.