ClawHub
Back to skill

Security audit

Two Sample Mr Research Planner

Security checks across malware telemetry and agentic risk

Overview

This is a text-only research planning skill with no evidence of hidden execution, credential access, persistence, or data exfiltration.

Before installing, treat this as a research-planning aid rather than validated statistical or medical advice. Pay particular attention to ancestry matching, sample overlap, weak instruments, and whether the suggested GWAS sources match your target population and study design.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
82% confidence
Finding
Line L78 instructs users to default to European ancestry GWAS pairs for primary analysis. Under the policy for natural-language violations, forcing a specific population/locale default without user opt-in or an explicit region-specific justification can be problematic, especially since the document otherwise covers multiple populations.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.