ClawHub
Back to skill

Security audit

Strategic Consulting

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only strategic consulting prompt pack with broad business triggers but no code execution, credential access, network calls, or persistence.

Install only if you want broad business and strategy questions routed through a consulting-style workflow. Avoid sharing confidential financials, trade secrets, personal data, or credentials unless intentionally needed, and independently verify market, legal, regulatory, or investment conclusions before acting on them.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger list contains broad generic terms such as business analysis, market insights, SWOT analysis, and investment advice that are likely to appear in many normal conversations. This can cause the skill to activate unintentionally, potentially overriding a more appropriate skill or causing the agent to respond in a consulting persona when the user did not explicitly request it.

Static analysis

No suspicious patterns detected.