ClawHub
Back to skill

Security audit

01 Crypto Trading Decision Framework

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only crypto trading checklist that can influence financial decisions but does not request account access or trading authority.

Install only if you want structured crypto trading decision support. Treat outputs as educational risk-management guidance, not financial advice or authorization to trade; keep final approval with a human, especially for live capital, stop changes, position closes, or sharing portfolio details with additional LLM providers.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The invocation scope is broad enough to activate on almost any trading-related discussion, including high-risk financial contexts where the skill may generate position sizing or trade recommendations. In a finance/trading skill, over-broad triggering increases the chance the agent offers actionable investment guidance without sufficient user intent, suitability checks, jurisdictional compliance, or confirmation that the user wants decision support rather than general education.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.