ClawHub
Back to skill

Security audit

白月光 | Moonlight Map

Security checks across malware telemetry and agentic risk

Overview

This is a journaling and reflection skill with clear emotional-safety boundaries and no code, installs, credential use, persistence, or external data transfer.

Use this only when you intentionally want structured emotional reflection. Treat it as journaling, not therapy or professional mental-health support, and avoid sharing real names, contact details, workplaces, addresses, screenshots, or other identifying information.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The entry examples are very broad, ordinary phrases such as '我忘不了一个人' and '我有个白月光', which can match casual conversation rather than an explicit request to invoke this skill. In agent environments with automatic routing, this increases the chance of accidental activation on sensitive emotional topics, causing unsolicited introspective prompting or collection of personal relationship details.

VirusTotal

46/46 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.