ClawHub
Back to skill

Security audit

促销方案测算虾

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed local calculator for promotion pricing and profitability, with no evidence of hidden network access, credentials use, persistence, or destructive behavior.

Install this if you want a Chinese-language local promotion profitability calculator. For batch mode, use CSVs containing only the SKU and cost data needed for the calculation, and verify assumptions such as platform fees, return rates, and sales uplift before making business decisions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
80% confidence
Finding
The trigger conditions are broad and include generic business words such as '促销', '折扣', 'ROI', '定价', and '活动方案', which can match many ordinary conversations outside the intended use case. Over-broad invocation can cause the agent to activate this skill in unrelated contexts, leading to unnecessary file access, use of estimated defaults, or execution of local scripts based on incomplete or unintended user input.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.