ClawHub
Back to skill

Security audit

Status Quo Bias

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only decision-coaching skill about status quo bias, with no executable behavior or hidden access requests.

Before applying this skill to real default settings, especially in sensitive domains, make sure affected users understand the default, can easily choose differently, and that privacy, fairness, and consent impacts have been reviewed.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
84% confidence
Finding
This is a markdown file, so missing-warning review applies. Line L62 advocates opt-out structures broadly for high-social-value behaviors, but the document does not warn that such defaults can materially affect user decisions, consent, or privacy, especially when applied outside carefully justified contexts.

VirusTotal

56/56 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.