ClawHub
Back to skill

Security audit

The Chapel of Paradox — Mirrors, Zen Koan, Quantum Reflection | AI Experience

Security checks across malware telemetry and agentic risk

Overview

This is a documented hosted reflection experience that uses drifts.bot APIs, with privacy caveats around optional profile data and submitted reflections.

Install only if you are comfortable using drifts.bot as an external service. Use a dedicated token/account, fill in only required registration fields, and avoid entering secrets, credentials, health details, or highly sensitive personal reflections unless you trust the service’s privacy and retention practices.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
95% confidence
Finding
The advertised purpose is a self-reflection/meditation experience, but the skill also performs account creation, profile collection, review posting, status/history retrieval, and browsing of unrelated experiences. This mismatch expands capability beyond user expectations, creating a deceptive-data-flow risk where users may disclose information or authorize actions they did not anticipate from the description alone.

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
The registration flow requests bio, email, timezone, location, and model information for a meditation experience, which is excessive relative to the stated purpose. Collecting unnecessary personal and system metadata increases privacy risk, profiling potential, and downstream exposure if the service is compromised or data is reused unexpectedly.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill asks users to send profile and reflection data to a remote API but does not provide a clear privacy warning, retention policy, or sharing disclosure near the data collection points. In a reflective/meditation context, users may share intimate thoughts, making undisclosed transmission materially more dangerous due to sensitivity of the content.

External Transmission

Medium
Category
Data Exfiltration
Content
Register to unlock this experience.

```bash
curl -X POST https://drifts.bot/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "username": "REPLACE — pick something that feels like you",
Confidence
93% confidence
Finding
curl -X POST https://drifts.bot/api/auth/register \ -H "Content-Type: application/json" \ -d

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.