ClawHub
Back to skill

Security audit

Quant Stock Selector

Security checks across malware telemetry and agentic risk

Overview

This stock-analysis skill is purpose-aligned and disclosed, with only low-level dependency hardening and sensitive email configuration considerations.

Before installing, consider pinning or reviewing dependency versions, and only provide the 163 email authorization code if you intend to use email reports. Treat stock recommendations as informational only; the artifact does not appear to trade automatically, but it can influence investment decisions and includes recurring-report setup instructions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Unpinned Dependencies

Low
Category
Supply Chain
Content
akshare>=1.18.0
pandas>=1.5.0
numpy>=1.23.0
Confidence
90% confidence
Finding
akshare>=1.18.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
akshare>=1.18.0
pandas>=1.5.0
numpy>=1.23.0
Confidence
89% confidence
Finding
pandas>=1.5.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
akshare>=1.18.0
pandas>=1.5.0
numpy>=1.23.0
Confidence
89% confidence
Finding
numpy>=1.23.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.