ClawHub

Ta Analyzer

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed technical-analysis helper that fetches public Binance market data and returns indicators and trading-style recommendations, with no evidence of credential access, trading execution, persistence, or hidden behavior.

Use this only as informational market analysis. Verify outputs independently, do not treat its buy/sell output as financial advice, and do not connect it to trading execution without separate safeguards and review.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The skill description contains broad trigger phrases such as requests for technical analysis, chart analysis, trading signals, and price predictions, which are common user intents and may cause the skill to be invoked too aggressively. In an agent setting, overbroad routing can expose users to high-stakes financial guidance without clear scoping or safeguards, increasing the chance of inappropriate autonomous recommendations.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly provides buy/sell recommendations, stop loss, take profit levels, and price-prediction-style outputs, but the markdown lacks a warning that this content can materially influence financial decisions. In the context of a trading-analysis skill, the absence of a financial-risk disclaimer and usage guardrails makes the issue more dangerous because users may treat generated output as actionable advice.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal