ClawHub
Back to skill

Security audit

MECE (Mutually Exclusive, Collectively Exhaustive)

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only thinking framework skill for structuring problems, with no code execution, credential access, persistence, or hidden data handling.

This skill is reasonable to install if you want an agent to structure complex analysis with MECE. Expect it may activate in broadly messy planning or strategy discussions, so review outputs for over-structuring when you are intentionally brainstorming or doing creative work.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
96% confidence
Finding
The manifest description says to activate when 'a problem feels too big to think about cleanly,' 'a list of options is messy or overlapping,' 'an analysis keeps going in circles,' or 'a presentation needs to survive hard scrutiny.' These conditions are subjective and common across many ordinary conversations, making the trigger scope broader than the specific named phrases and increasing the risk of accidental activation.

Static analysis

No suspicious patterns detected.