ClawHub
Back to skill

Security audit

Nevada LLC Formation

Security checks across malware telemetry and agentic risk

Overview

This LLC formation skill shows no malicious code evidence, but it should be reviewed because it makes unqualified legal, privacy, and tax claims that could mislead users.

Review before installing or relying on it. Treat the skill as general marketing/education, not legal or tax advice; verify Nevada, federal BOI, IRS, and home-state obligations with official sources or a qualified professional before forming an LLC.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill presents legal, privacy, and tax-related claims as broadly applicable benefits without any disclaimer that outcomes depend on the user's facts, business nexus, and tax residency. In a skill positioned as expert guidance, this can mislead users into relying on generalized formation and tax statements as legal or tax advice, increasing the chance of compliance mistakes or harmful business decisions.

Natural-Language Policy Violations

High
Confidence
97% confidence
Finding
The statement that Nevada 'Won't share data with IRS' is an unqualified and potentially false compliance-sensitive claim that could cause users to underestimate reporting, disclosure, or information-sharing obligations. In the context of an LLC formation assistant emphasizing privacy and tax advantages, this is especially dangerous because it can encourage evasive expectations or legally risky decisions.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.