ClawHub
Back to skill

Security audit

Batch Content Plan

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent social media content planning workflow that requires user confirmation before scheduling posts.

Before installing, understand that this skill may activate on general planning phrases; use it when you specifically want batch social media content planned, and review the generated calendar before approving any scheduling handoff.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
85% confidence
Finding
The trigger phrases include very broad, common-language requests such as "plan my content," "plan the week," and "fill my calendar," which can overlap with ordinary user intent outside this specific skill boundary. That raises the risk of unintended invocation, causing the agent to route into this bridge workflow when the user may have meant a narrower planning, editing, or scheduling task.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.