ClawHub
Back to skill

Security audit

Psych Quiz

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only mental wellness quiz skill with clear non-diagnostic boundaries, but users should treat its results only as self-reflection.

Install only if you want lightweight stress, sleep, or mood self-check prompts. Do not use it for diagnosis or treatment decisions; seek a licensed professional or local emergency/crisis support for severe distress, self-harm thoughts, worsening hopelessness, or major daily-function decline.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill offers mental-health self-assessment, scoring, and interpretation, but the README does not clearly and prominently state that the quiz is not medical advice, not a diagnosis, and not a substitute for professional care. In a mental-wellness context, users may over-trust the output, self-diagnose, or delay seeking help, especially when the skill appears to distinguish causes such as anxiety or other reasons.

Vague Triggers

Medium
Confidence
86% confidence
Finding
The listed trigger phrases include very broad, everyday expressions such as general requests about stress or how the user has been feeling. This can cause the skill to activate in situations where the user did not intend a structured mental-health quiz, increasing the chance of inappropriate routing for sensitive conversations and potentially interfering with safer or more suitable handling.

VirusTotal

57/57 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.