ClawHub
Back to skill

Security audit

Patent Analysis Avoidance

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill provides disclosed patent analysis and design-around guidance, with legal-risk warnings and no executable code or hidden access.

Use this as an informational patent-analysis aid, not as legal advice. Patent design-around and infringement-risk decisions can affect product launches and liability, so verify any proposed redesign with a qualified patent attorney and a broader patent search before implementation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The activation scope is explicitly broad ('无论用户…都应触发此技能'), which can cause the skill to intercept a wide range of patent-related queries without checking user intent, jurisdiction, or whether the request is asking for infringement-avoidance guidance. In this context, that increases the chance the system will provide design-around advice for potentially infringing products or trigger when a safer, narrower analysis skill would be more appropriate.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.