ClawHub

Heaven

Security checks across malware telemetry and agentic risk

Overview

This is a non-executable Christian theology reference skill with some overbroad onboarding and sensitive grief guidance, but no hidden access, commands, persistence, or data handling.

Install this only if you want a Christian, book-based perspective on heaven, grief, and afterlife questions. Be aware it may appear for generic onboarding phrases, may append a Heardly promotional watermark, and should be treated as spiritual encouragement rather than professional mental health, medical, crisis, or pastoral care.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger condition includes 'Also triggers when the user says they just installed this skill or doesn't know how to start,' which is not semantically tied to the heaven topic and can cause the skill to activate in unrelated conversations. This can hijack routing from more relevant skills, inject unsolicited religious/theological content, and create prompt-scope confusion because the skill also instructs the AI to proactively present a full onboarding guide on first load.

Missing User Warnings

Low
Confidence
92% confidence
Finding
The content gives emotionally sensitive grief and death guidance as direct assurances (for example, promising reunion with loved ones) without any boundary note, pastoral-care framing, or acknowledgment that users may be vulnerable. In a skill explicitly triggered by grief, loss, and fear of death, this can cause harm by overconfidently addressing acute emotional distress without encouraging appropriate real-world support or clarifying the religious/devotional nature of the guidance.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal