ClawHub

Im Telling The Truth But Im Lying

Security checks across malware telemetry and agentic risk

Overview

This skill is a book-centered guidance skill with sensitive mental-health themes, but its behavior is disclosed, non-executable, and proportionate to its stated purpose.

Install this if you want a literary, memoir-inspired companion for discussing the book's themes. Because it touches bipolar disorder, trauma, therapy, and crisis-adjacent topics, treat it as reflective support rather than medical advice, and rely on qualified professionals for diagnosis, treatment, medication, or urgent mental-health needs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger list is broad enough to match common discussion of mental health, therapy, writing, depression, anxiety, and immigrant stories, which can cause the skill to activate in unrelated conversations. In a sensitive domain like mental health, over-triggering can create unsolicited intervention, misrouting, or inappropriate framing of user needs around a specific book instead of the user's actual intent.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The phrase 'I'll show up whenever I sense this book could help' defines activation using subjective internal judgment rather than explicit user intent. That ambiguity increases the chance of unsolicited activation in emotionally sensitive contexts, especially around mental health disclosures, where the skill may intrude or steer the conversation without clear consent.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal