ClawHub
Back to skill

Security audit

Dental Self Care

Security checks for vulnerabilities and agentic risk

Overview

This is not malware, but it gives health self-management instructions and stores sensitive dental, medical, location, and financial details with weak privacy and escalation boundaries.

Install only if you are comfortable with an agent creating local files containing dental symptoms, medical conditions, location, job, and income-related details. Treat the skill as prevention, tracking, and care-navigation support, not diagnosis or treatment; use a licensed dentist, urgent care, or emergency care for pain that worsens, swelling, fever, pus, trauma, difficulty swallowing or breathing, pregnancy, diabetes, heart conditions, immunocompromise, or uncertainty.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The invocation criteria are broad enough to trigger this skill for common cost, access, or minor-symptom situations, which can steer users toward self-treatment workflows before appropriate professional triage. In a health-related skill that includes decision trees, home remedies, and emergency guidance, overbroad activation increases the chance of delayed care and misuse outside safe bounds.

Natural-Language Policy Violations

Medium
Confidence
92% confidence
Finding
The description uses financial hardship, remote living, and inability to access care as persuasive framing for relying on self-managed dental protocols, which can normalize substitution of home care for professional evaluation. In this medical context, that framing is especially risky because users under economic pressure may defer treatment for infections, trauma, or progressive disease despite the disclaimer and red-flag notes.

Static analysis

No suspicious patterns detected.