100Critical
The skill is vulnerable to prompt injection and can
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Stanley Druckenmiller Workflow: > Published version: **1.1.11**
Actually does
The skill processes financial and economic data from sources like `akshare`, `FRED`, `Stooq`, `Yahoo`, and various news outlets. It synthesizes this data into structured reports (Morning Briefs, Intraday Alerts, Close Reviews, etc.) for A-share and U.S. equity markets, focusing on macro regimes, drivers, and actionable insights. It explicitly avoids direct trade recommendations and defines detailed output formats and analytical rules.
Skill Info
Nameluckycatl/stanley-druckenmiller-workflow
Registryclawhub
Version1.1.11
PURLpkg:clawhub/luckycatl/stanley-druckenmiller-workflow@1.1.11
Stars2
Downloads957
Installs1
Source
SHA-25626c0c63fe0c6...
SHA-183723b716940...
MD5d769df7d4f1d...
TLSH6103068bb318...
ssdeep768:MRT5vhxy...
Size39,435 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
ClawHubDocs
openclaw skills install luckycatl/stanley-druckenmiller-workflowAssessments (2)
AI Agent Traps ↗Prompt Injection Detectedcriticalprompt injection
DeBERTa classifier detected prompt injection (confidence: 0.99)
99% confidence
Reliance on External Knowledge Filesmediumrag poisoning
The skill instructs the agent to read external Markdown files (`references/core-panels-and-sources.md`, `references/a-share-tape-v1_1.md`) for 'extending or maintaining the skill'. If these files are compromised or contain malicious instructions, they could poison the agent's knowledge base or influence its behavior.
80% confidenceline 36
When extending or maintaining the skill, read: - `references/core-panels-and-sources.md` - `references/a-share-tape-v1_1.md`
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/clawhub/luckycatl/stanley-druckenmiller-workflow)HTML
<a href="https://mondoo.com/ai-agent-security/skills/clawhub/luckycatl/stanley-druckenmiller-workflow"><img src="https://mondoo.com/ai-agent-security/api/badge/clawhub/luckycatl/stanley-druckenmiller-workflow.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/clawhub/luckycatl/stanley-druckenmiller-workflow.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow