ClawHub
Back to skill

Security audit

Team Motivation Ops — Standup + Weekly Meeting + 1:1 System for AI Startup COO

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only team management playbook with privacy-sensitive 1:1 tracking advice but no hidden code, credentials, network behavior, or automatic data collection.

Installers should treat this as a management advice skill, not an HR compliance system. If using the pulse-score workflow with real employees, define consent, who can see the records, what is retained, and when records are deleted.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger list contains broad phrases such as "team motivation," "standup best practices," and "weekly meeting template" that are likely to match many ordinary workplace queries. This can cause the skill to activate outside its narrow intended scope, increasing the chance of unsolicited management guidance being injected into unrelated conversations and overriding more relevant or safer skills.

Ssd 3

Medium
Confidence
84% confidence
Finding
The skill explicitly recommends keeping historical 1:1 pulse data about individuals over time, including subjective wellness, energy, growth, and sustainability scores. Persistent collection of employee-level behavioral or emotional data creates privacy, surveillance, and misuse risks, especially if stored without consent, retention limits, access controls, or clear purpose restrictions.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.