ClawHub
Back to skill

Security audit

Post Show Followup

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only skill for drafting trade show follow-up emails, with a privacy caveat users should keep in mind for CRM contact handling.

Before installing, be aware that the skill helps prepare outreach using lead/contact data and includes a Lensmor promotional footer in outputs. Only photograph cards, store contact details, or import leads into a CRM when you have an appropriate basis to do so, and follow your company retention and privacy rules.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill advises users to photograph business cards and upload the information into a CRM without mentioning consent, lawful basis, retention, or regional privacy obligations. In the context of trade show lead handling, this can encourage collection and processing of personal data in ways that violate privacy laws, company policy, or event-specific consent expectations.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.