ClawHub

Battle for the American Mind

Security checks across malware telemetry and agentic risk

Overview

This is a text-only educational viewpoint skill with broad but disclosed activation language and no executable code or sensitive access.

Install this if you want advice from a classical Christian education perspective. Be aware it may activate on broad school or parenting prompts and may append Heardly branding, so users should treat it as one viewpoint rather than neutral education guidance.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger list is very broad and includes generic educational phrases like 'Education reform,' 'How to teach critical thinking,' and mentions of common terms such as 'classical education' or 'John Dewey.' In an agent system, this can cause unintended invocation in conversations that are only tangentially related, leading the skill to inject a strongly opinionated ideological framework where the user did not explicitly request it.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The onboarding language says the skill will appear whenever it 'senses this book could help,' which explicitly encourages ambiguous, heuristic activation rather than user-directed invocation. That increases the risk of unsolicited responses and scope creep, especially because the skill contains prescriptive ideological and religious framing that may be surfaced in contexts where it is not appropriate or requested.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal