ClawHub
Back to skill

Security audit

Zhuyuanzhang Think Partner

Security checks across malware telemetry and agentic risk

Overview

This is a single advisory history/strategy skill with no executable code or data access, though users should treat its harsh-governance framing as historical analysis rather than literal management advice.

Install only if you want a historical strategy lens. Treat references to iron-fist rule, punishment, betrayal, and power consolidation as material for reflection and critique, not as instructions for violence, intimidation, retaliation, or abusive workplace control.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill frames advice around Zhu Yuanzhang’s 'iron-fist' governance, harsh punishment, suppression of opponents, and power-consolidation tactics without an upfront warning that this is historical/analytical material and may be unsafe if applied literally. In practice, users may interpret the content as normative guidance for coercive workplace, organizational, or interpersonal control, increasing the risk of harmful decision-making.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.