ClawHub
Back to skill

Security audit

Resilience Building Architect

Security checks across malware telemetry and agentic risk

Overview

This is a self-help resilience skill with clear boundaries and no evidence of data access, persistence, network use, or hidden behavior.

Reasonable to install for reflective resilience exercises, but do not treat it as therapy or crisis support. If a user feels unsafe, hopeless, suicidal, unable to cope, or in medical or mental-health crisis, they should contact local emergency services, a crisis hotline, or a licensed professional.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill includes high-risk mental health scenarios such as a cancer diagnosis and a statement that life feels meaningless, but it does not place immediate crisis guidance or escalation instructions adjacent to those examples. In a psychological recovery context, users may treat the skill as support during acute distress, and the absence of explicit emergency routing can delay help-seeking in potentially dangerous situations.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.