ClawHub
Back to skill

Security audit

Logistics Exception Management

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed logistics guidance playbook and does not show hidden access, credential handling, persistence, or automated control of external systems.

Reasonable to install as a knowledge skill. Use normal human review and business approval before applying its advice to real claims, carrier disputes, payment holds, customer communications, legal notices, insurance filings, or law-enforcement escalation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
83% confidence
Finding
The invocation scope is broad enough that the skill could activate on many ordinary shipping or delivery questions, causing over-selection and unnecessary exposure of embedded operational guidance. While this is not an exploit primitive by itself, ambiguous triggering can increase the chance that the skill is applied in inappropriate contexts and may override more suitable domain or safety controls.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal