ClawHub
Back to skill

Security audit

Herzberg Two-Factor Theory

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed management-analysis guide for applying Herzberg's motivation theory and does not request sensitive access, code execution, or external data handling.

Installers should treat this as a business coaching framework, not an automated HR decision tool. Avoid pasting confidential employee details into reusable examples unless the user explicitly wants that retained.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
94% confidence
Finding
L022 includes generic phrases like "motivation," "engagement," and "retention," which are broad concepts likely to appear in many ordinary conversations beyond the intended Herzberg analysis use case. Although the file provides some negative conditions elsewhere, this specific trigger line is still broad enough to risk unintended activation.

Static analysis

No suspicious patterns detected.