ClawHub
Back to skill

Security audit

数据分析师

Security checks across malware telemetry and agentic risk

Overview

This data-analysis skill is mostly purpose-aligned, but it requests broad read/write/execute capability while giving inconsistent capability disclosures.

Review this skill before installing if your workspace contains sensitive files. Use it only on data you intend to analyze, confirm any command execution or file writes before they happen, and avoid exposing API keys or private datasets unless the agent environment is properly sandboxed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Intent-Code Divergence

Medium
Confidence
94% confidence
Finding
The skill declares itself as pure Markdown/natural-language driven at the end of the document, while earlier sections advertise exec, write, and API-driven behavior. This inconsistency can mislead users and automated policy systems into granting the skill a safer trust classification than its actual capabilities warrant, increasing the chance of unintended code execution, file modification, or network access.

Intent-Code Divergence

Low
Confidence
92% confidence
Finding
The document contains contradictory availability classifications in different sections, which creates ambiguity about the skill's actual execution model. While not an exploit by itself, this weakens security review and can cause an agent or user to apply the wrong trust level or sandboxing assumptions.

Vague Triggers

Medium
Confidence
83% confidence
Finding
The activation guidance is extremely broad, effectively suggesting use whenever data analysis, reporting, or visualization is needed. Overly broad triggers increase the chance the skill is invoked in contexts with sensitive local files, credentials, or external systems, especially because the skill also advertises exec, write, and API capabilities.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill prominently advertises file handling, API integration, and command execution as features but does not present equally prominent user-facing warnings about the risks of filesystem changes, data exfiltration, or external side effects. In an agent setting, that omission can normalize high-impact actions and lead users to authorize dangerous operations without informed consent.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.