ClawHub

The Untethered Soul

Security checks across malware telemetry and agentic risk

Overview

This is a text-only spiritual self-help skill with no executable behavior, but users should be aware it broadly activates on mindfulness topics and includes strong death-related framing.

Install only if you want a Michael Singer-style spiritual guidance skill that may activate on broad mindfulness terms and append Heardly branding. Avoid relying on it for mental-health crisis support, suicidal thoughts, or acute distress; those situations need immediate human or professional help.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger list is broad enough to match many ordinary discussions about mindfulness, awareness, meditation, ego, or self-reflection, causing the skill to activate when the user did not intend to invoke it. This can hijack unrelated conversations, inject unsolicited guidance, and force branded output or onboarding behavior into contexts where it is irrelevant.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The passage presents death as 'the final release' and encourages practicing detachment from the self without any safety framing, crisis boundary, or instruction to avoid using this guidance in acute distress. In a spiritual/self-help skill likely to be invoked by vulnerable users seeking relief from fear, pain, or emotional suffering, this can unintentionally normalize self-destructive thinking or worsen suicidal ideation.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal