ClawHub
Back to skill

Security audit

Deliberate Cold Exposure

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only cold-exposure coaching skill, but it gives risky physical protocols and asks for health logging without enough safeguards or privacy detail.

Review before installing. Use only if you are explicitly seeking cold-exposure training, have considered medical clearance, and are comfortable storing health-related logs locally. Treat reminders, calendars, research, and email as unavailable unless your agent separately has those tools and you approve them. Avoid unsupervised natural-water plunges and breath-hold cold activities.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The activation criteria are broad enough to match generic requests about energy, mood, stress resilience, or sedentary habits, which can route users into a physically risky protocol without sufficient upfront screening. In a wellness context, over-triggering is dangerous because this skill escalates to cold immersion and other advanced practices that can harm users with cardiovascular or other contraindications.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill introduces advanced practices such as 2–5 minute plunges 4–6 times per week, outdoor winter plunges, and breath-hold walks in cold air without comparably strong, repeated warnings about hypothermia, cold shock, drowning/syncope, arrhythmia risk, and the need for supervision and medical clearance. In this context, understated warnings are especially dangerous because users may interpret the protocol as professionally validated and routine, increasing the chance of severe injury during home or natural-water exposure.

Static analysis

No suspicious patterns detected.