ClawHub
Back to skill

Security audit

Self-Evolution 3D

Security checks across malware telemetry and agentic risk

Overview

This is a non-executable personal-growth coaching skill with disclosed scope and no evidence of hidden data access, persistence, or unsafe actions.

Install only if you want an agent to use this personal-growth framework for leadership or self-development discussions. It may ask reflective questions and suggest behavior-tracking exercises, but the inspected version does not run code or access private systems.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The activation criteria use broad, common phrases like 'how do I grow as a person / leader / founder' and 'I've been working hard but I'm not growing,' which can easily match ordinary conversation outside the intended use case. In an autonomous skill-routing system, this can cause over-activation, steering users into a self-development framework when a narrower or more appropriate skill should be used instead.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The 'When to Use' section repeats similarly broad trigger examples without operational constraints, reinforcing ambiguous invocation behavior. This increases the chance that an agent will apply the skill to generic dissatisfaction or performance issues, leading to misclassification and potentially displacing more suitable guidance.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.