ClawHub
Back to skill

Security audit

Personal Ritual Designer

Security checks across malware telemetry and agentic risk

Overview

This skill is a low-impact self-reflection helper that does not access files, credentials, networks, or persistent storage.

Install only if you are comfortable with a wellness-oriented skill activating on everyday ritual or grounding requests. Treat its suggestions as self-reflection prompts, not mental-health or professional advice.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger phrases are broad, generic lifestyle terms such as 'morning ritual' and 'grounding practice' that can easily appear in ordinary user conversation. This can cause unintended activation or overbroad routing, leading the skill to engage without clear user intent and increasing the chance of inappropriate interception of unrelated requests.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.