ClawHub
Back to skill

Security audit

God-tier Webnovel Skill

Security checks across malware telemetry and agentic risk

Overview

This is a text-only Chinese fantasy webnovel writing skill with no code, file access, credentials, network use, or persistence.

Install this only if you want help writing intense Chinese xianxia webnovel scenes. Expect a strong Chinese genre voice and graphic fictional combat; there is no artifact evidence of hidden execution, data access, credentials use, or external communication.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
The skill strongly constrains output to Chinese and to a specific stylistic register without indicating that this is an intentional locale restriction or giving the user a language override. This can cause the agent to ignore user language preferences or broader system expectations, reducing usability and potentially causing prompt-conflict behavior in multilingual environments.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.