ClawHub

Ai Engineering Legal

Security checks across malware telemetry and agentic risk

Overview

This is a text-only engineering cost and legal guidance skill with disclosed high-stakes use cases but no hidden code, persistence, credential access, or automatic actions.

Install only if you want construction-cost and legal workflow templates. Do not rely on it as a licensed lawyer, judicial appraiser, or jurisdiction-specific authority; have a qualified professional review contracts, filings, appraisal opinions, evidence strategy, and major financial or litigation decisions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The skill’s trigger and scope are extremely broad, covering many loosely defined legal and cost-engineering scenarios. In an agent environment, this can cause the skill to activate for high-stakes matters without clear boundaries, increasing the chance of overreliance, misclassification, or unsafe automated guidance in legal or quasi-expert contexts.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill provides structured legal-analysis and dispute-handling workflows, including contract review, evidence-chain analysis,鉴定意见 drafting, and litigation/negotiation support, but does not present a strong, upfront limitation that outputs are informational only and require professional review. In sensitive legal disputes, users may treat the model’s analysis as authoritative, leading to defective filings, poor negotiation positions, or other material legal harm.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal