ClawHub

Anxiety Emergency

Security checks across malware telemetry and agentic risk

Overview

The anxiety-support content is coherent, but the skill asks for calendar and filesystem access that its instructions do not explain.

Read the permission request carefully before installing. The anxiety guidance itself is disclosed and purpose-aligned, but calendar and filesystem access are not explained by the skill text; install only if you can restrict those permissions or are comfortable granting them. For urgent self-harm risk or immediate danger, use local emergency services or a crisis line rather than relying on this skill alone.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The top-level description uses broad phrases like 'feels overwhelmed' and 'needs immediate grounding techniques,' which can match many non-emergency situations and cause this crisis-oriented skill to trigger unintentionally. In a mental health context, over-triggering is risky because it may bypass more appropriate non-crisis support flows or prematurely introduce crisis framing and hotline guidance.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The 'When to Use' section mixes clear acute cases with broad conditions like 'feeling overwhelmed,' 'looking for anxiety management strategies,' and 'wants to find affordable therapy or professional help.' For a crisis skill, these ambiguous triggers can cause the agent to invoke emergency-style instructions for ordinary anxiety or resource-seeking conversations, which is especially problematic in mental health workflows where correct triage matters.

VirusTotal

56/56 vendors flagged this skill as clean.

View on VirusTotal