ClawHub

Psychology Master

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed psychology and ethical marketing reference bundle with local-only helper scripts and no evidence of hidden access, persistence, exfiltration, or destructive behavior.

Installers should treat this as a psychology and marketing guidance skill, not a clinical tool. When using it for conversion optimization or audience segmentation, apply the included ethics and privacy checklists: use consented data, avoid vulnerable targeting, avoid fake urgency or manipulative defaults, and keep clinical or legal decisions with qualified professionals.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Confidence
94% confidence
Finding
This section explicitly teaches cognitive biases and choice architecture as UX/marketing levers to shape user decisions, including defaults, loss aversion, social proof, scarcity, and framing, with only minimal ethical qualification. In a skill positioned for persuasion, conversion optimization, and customer psychology, this can enable dark-pattern design that reduces informed consent and steers users toward actions they might not otherwise choose.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The file recommends inferring personality from behavior data such as language use, purchase history, engagement patterns, and social media activity, but it does not clearly warn that these are sensitive inferences that can raise privacy, consent, and profiling concerns. In a psychology and marketing skill, this guidance can enable manipulative or non-consensual audience segmentation, making the omission materially more dangerous than a purely academic discussion.

VirusTotal

53/53 vendors flagged this skill as clean.

View on VirusTotal