ClawHub

The Mastery Of Love

Security checks across malware telemetry and agentic risk

Overview

This appears to be a book-based relationship guidance skill with broad activation wording, but no evidence of hidden code, data access, persistence, credentials, or destructive behavior.

Install only if you want book-inspired relationship guidance to appear in broad conversations about love, fear, healing, forgiveness, and relationships. Expect possible over-activation; disable or avoid the skill if you prefer it to respond only when explicitly requested.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger list includes extremely broad, everyday terms such as 'love', 'relationships', 'healing', 'fear', and 'forgiveness', which can cause the skill to activate in many unrelated conversations. This creates overbroad interception risk: users may be routed into this skill unexpectedly, exposing them to unsolicited guidance and making the skill easier to invoke outside its intended context.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The statement that the skill will 'show up whenever I sense this book could help' defines activation using an ambiguous, subjective condition rather than a clear user request. That increases the chance of unsolicited activation and unpredictable routing, which is risky for a skill covering sensitive topics like trauma, self-worth, jealousy, and relationships.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal