ClawHub
Back to skill

Security audit

Analytical Thinking

Security checks across malware telemetry and agentic risk

Overview

This skill only guides the agent to answer analytical questions in a structured format and does not add code or request access.

Install this if you want more formal, structured analytical answers. Expect it may make some reasoning responses longer or more framework-driven, but it does not grant the agent additional system access.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The skill's activation criteria are broad enough to trigger on many ordinary requests for structured reasoning, decomposition, or analysis. Overly broad activation can cause the agent to invoke this skill in contexts where it was not explicitly requested, increasing prompt-surface area and creating opportunities for instruction shadowing, response-shaping, or unexpected behavior across unrelated tasks.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.