ClawHub

Foraging Wild Edibles

Security checks across malware telemetry and agentic risk

Overview

This is a coherent foraging guide, but it includes broadly triggered and potentially dangerous instructions for eating unknown wild plants.

Install only if you want educational foraging reference material, not real-time confirmation that a plant is safe to eat. Do not rely on this skill to decide whether to consume an unidentified plant; use local expert confirmation, regional field guides, and poison control or emergency services if ingestion or symptoms are involved.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The skill's activation criteria are broad enough to trigger on routine questions about food, plant safety, or wilderness situations, which increases the chance the agent will provide high-risk foraging guidance in contexts where the user may be inexperienced or under stress. In a domain where mistakes can cause poisoning or death, over-broad routing is a real safety vulnerability even without malicious intent.

Missing User Warnings

High
Confidence
97% confidence
Finding
The 'universal edibility test' gives procedural instructions for ingesting unknown plants, which can directly encourage dangerous experimentation with toxic species. Although it says 'survival only,' it does not lead with a stronger directive to seek rescue, emergency assistance, or known-safe alternatives first, and some toxins are not detected by the described test, making the guidance hazardous in practice.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal