ClawHub

Scenario Analyzer

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent investment-scenario report generator that uses disclosed web search, named review agents, and a scoped local report file, with no evidence of hidden or destructive behavior.

Install only if you are comfortable with headlines being used in web-backed analysis and passed between the disclosed subagents. Review any saved reports before sharing them, avoid entering confidential market-sensitive information, and do not rely on the generated stock scenarios as professional financial advice.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The skill goes beyond analysis by instructing the agent to create directories and write a persistent local report file. That expands capability from content generation into filesystem modification, which can cause unintended data persistence, overwrite risks, and privacy/compliance issues, especially because the report contains investment recommendations and externally gathered content.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill generates and saves investment recommendations without prominent user-facing warnings about financial risk, uncertainty, and the non-advisory nature of the output. This is dangerous because users may over-trust the generated recommendations, and persistence of the report can amplify downstream misuse, redistribution, or mistaken reliance as formal investment advice.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal