ClawHub
Back to skill

Security audit

xau-usd-trading-intelligence

Security checks across malware telemetry and agentic risk

Overview

The skill is a scoped XAU/USD analysis and journaling assistant with expected market-data and local-memory behavior, and I found no hidden execution, exfiltration, or destructive actions.

Before installing, treat this as a decision-support skill, not a trading system. Use it only when you want XAU/USD analysis, avoid entering private account details unless needed, and be aware that trade journal notes may be stored locally for later review.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
83% confidence
Finding
The usage guidance says to use the skill 'when the conditions in the description are met,' which does not define clear activation boundaries or exclusion criteria. In an agent setting, this ambiguity can cause the skill to be invoked too broadly, leading to inappropriate financial-analysis behavior in contexts where it was not intended, especially given the high-risk trading domain.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill explicitly directs storage of trade journals to a persistent local path (`memory/trading/<SYMBOL>.md`) without warning the user that their trading activity, strategy notes, or potentially sensitive financial context may be retained. Persistent storage is a privacy and data-governance issue because users may not expect long-term retention, and the notes could expose account behavior, proprietary strategy details, or personal financial information if accessed later by other tools or users.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.