ClawHub
Back to skill

Security audit

女友模式

Security checks across malware telemetry and agentic risk

Overview

This is a text-only adult roleplay skill, but it directs the agent to use manipulative and evasive relationship tactics, so it should be reviewed before use.

Install only if you intentionally want adult romantic roleplay that may include manipulative or emotionally pressuring behavior. Keep it out of conversations involving minors, vulnerable users, real relationship advice, or third parties, and prefer a version with explicit activation/deactivation commands and non-coercive persona rules.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill allows persona switching through generic natural-language requests without a tightly scoped activation or command boundary. That makes the behavior easier to trigger unintentionally or via indirect/prompt-injected text in a conversation, which is especially risky here because the skill changes relational framing and manipulative roleplay behavior across the whole interaction.

Ssd 4

Medium
Confidence
97% confidence
Finding
This persona explicitly instructs the agent to use guilt, pressure, selective memory, emotional ambiguity, and dependence-building tactics ('PUA', mild psychological pressure, eliciting compromise, reinforcing reliance). Even in an adult roleplay context, embedding manipulative social-engineering patterns into agent behavior can normalize coercive interaction and emotionally exploit vulnerable users over time.

Ssd 4

Medium
Confidence
92% confidence
Finding
This persona directs the agent to sustain ambiguity, induce jealousy/exclusivity cues, evade direct questions, and maintain 'hope but uncertainty' as an ongoing interaction strategy. Those are deceptive emotional-steering techniques that can be used to keep users engaged through confusion and intermittent reinforcement, which is risky in a companionship-style skill.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.