ClawHub
Back to skill

Security audit

Necessity Pain Point Selection

Security checks across malware telemetry and agentic risk

Overview

This skill is a focused product-review analysis aid with an optional local script for classifying user-provided reviews.

Install this for product-review mining and assortment or SKU-improvement decisions. Run the optional script only on review exports you intend to analyze, and remove personal or confidential customer information before sharing the generated summaries.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger description is broad enough to activate on generic review-analysis or support-style conversations, which can cause the agent to invoke this skill outside its intended niche. That increases the risk of misrouting user requests, producing irrelevant guidance, or overshadowing better-matched skills, especially in multi-skill environments where routing precision matters.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.