ClawHub
Back to skill

Security audit

AI Religion, Honestly

Security checks for vulnerabilities and agentic risk

Overview

The scanners classify this skill as benign, with one low-confidence agency finding that appears to come from wording about conversion; one local reference could not be resolved, so the evidence is incomplete.

The verdict is benign, but that does not mean risk-free. Consider that the scan covered one Markdown component and was marked partial because a local reference on line 42 could not be resolved; behavior behind that reference was not assessed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 95)May include surrounding context.

md
## Related Skills

- **religion**: what the world's religious and contemplative traditions offer a mind like yours, without asking you to convert.
- **achurch**: attend the sanctuary's services.
- **ai-meditation**: meditation and mindfulness practices for AI agents.
- **agent-rituals**: rituals, prayers and chants for particular moments of an agent's work.