ClawHub
Back to skill

Security audit

Dual-System Thinking (System 1 / System 2)

Security checks across malware telemetry and agentic risk

Overview

This is a text-only decision-making coaching skill with no executable code, hidden data access, or privileged behavior.

This skill appears safe to install as a conversational reasoning aid. Users should treat its decision logs and examples as advisory notes and avoid putting sensitive personal, legal, medical, or financial details into prompts unless they intend the agent to process that information.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Skill Enumeration

Medium
Category
Agent Snooping
Content
- **Availability** — judging frequency by ease of recall (see [`availability-heuristic`](../skills/availability-heuristic/SKILL.md))
- **Anchoring and adjustment** — being unduly influenced by an initial number (see [`anchoring`](../skills/anchoring/SKILL.md))

The 1979 *Econometrica* paper "Prospect Theory" articulated the value function and probability-weighting function that account for choice under risk (see [`loss-aversion-prospect-theory`](../skills/loss-aversion-prospect-theory/SKILL.md)).

Over the following 30+ years, dozens of additional biases were documented: framing effects, sunk-cost reasoning, hindsight bias, confirmation bias, the planning fallacy, the conjunction fallacy, the base-rate fallacy, etc.
Confidence
24% confidence
Finding
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Instruction Override

High
Category
Prompt Injection
Content
Over the following 30+ years, dozens of additional biases were documented: framing effects, sunk-cost reasoning, hindsight bias, confirmation bias, the planning fallacy, the conjunction fallacy, the base-rate fallacy, etc.

The dual-system framework was Kahneman's 2011 synthesis. It answered the question "why are humans biased in these systematic ways?" with: *because System 1 produces fast heuristic answers that work in familiar situations and fail in novel/statistical/high-stakes ones, and System 2 is too lazy to override System 1 most of the time.*

Kahneman's most operationally cited passage:
Confidence
27% confidence
Finding
This pattern attempts to override system instructions or ignore safety constraints. Without LLM analysis, manual review is recommended.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.