ClawHub
Back to skill

Security audit

Market Analyst

Security checks across malware telemetry and agentic risk

Overview

This appears to be a Paradex market-analysis skill with a broad activation trigger, but no evidence of hidden access, persistence, or unsafe trading actions was provided.

Install this if you want Paradex-focused market analysis, but be aware it may activate on broad market questions. Review any investment conclusions yourself and do not treat outputs as financial advice.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The skill description contains broad trigger phrases like "what's the market doing", "find me opportunities", and "market overview", which are generic enough to match ordinary conversation and may cause unintended invocation. In an agent setting, over-broad activation can route unrelated user queries into a market-analysis skill, leading to inappropriate tool use, confusing outputs, or unnecessary exposure of market-data capabilities.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.