ClawHub
Back to skill

Security audit

Renovation 143m

Security checks across malware telemetry and agentic risk

Overview

This skill is a clearly scoped renovation-planning assistant for one 143㎡ apartment, with disclosed web and image tool use and no evidence of hidden install behavior or data abuse.

Install this if you want advice tied to this specific 143㎡ apartment. For a different home or general renovation question, confirm that the assistant should not apply this fixed layout. Treat dimensions, budgets, search results, and AI images as planning references, not construction documents or final quotes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger list contains broad everyday renovation terms such as 装修规划, 验房, 装修风格, 材料选择, and 预算规划 that are not tightly scoped to the fixed 143㎡ apartment context. This can cause unintended invocation during unrelated home-improvement conversations, exposing users to irrelevant or misleading specialized guidance and increasing the chance that the skill hijacks routing from more appropriate tools.

VirusTotal

35/35 vendors flagged this skill as clean.

View on VirusTotal