ClawHub
Back to skill

Security audit

Car Diagnostics

Security checks across malware telemetry and agentic risk

Overview

This is a simple car-maintenance guidance skill with no code or hidden access, though users should treat its repair advice as general guidance rather than a substitute for a mechanic.

Installers should understand that this skill offers general car troubleshooting and cost-estimate guidance only. For brakes, steering, airbags, fuel smells, overheating, oil-pressure warnings, electrical burning odors, lifting a vehicle, or any uncertain repair, users should stop and consult a qualified mechanic.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill description is broad enough to trigger on ordinary conversation about cars, which can cause the assistant to activate this specialized skill outside clearly diagnostic contexts. Over-broad invocation increases the chance of unsolicited repair or maintenance guidance being injected into casual chats, potentially leading users to act on advice that was not requested or appropriate for their vehicle or situation.

Vague Triggers

Medium
Confidence
90% confidence
Finding
The 'When to Use' section lacks trigger constraints and exclusion cases, so the orchestrator may route many loosely related automotive conversations into this skill. In a domain involving mechanical safety, over-routing can produce premature or overly confident advice without enough context about the vehicle, symptom severity, or user capability.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill provides DIY-oriented repair guidance and symptom-to-cause suggestions without safety disclaimers, uncertainty framing, or limits of remote diagnosis. In car repair contexts, users may attempt hazardous actions around batteries, brakes, hot cooling systems, or moving parts, and incorrect remote advice can create injury risk or worsen vehicle damage.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.