Security audit

Habit Formation

Security checks for vulnerabilities and agentic risk

Overview

The skill is ordinary habit-coaching content, but it asks for unnecessary filesystem access and installs through an unpinned npx command, so users should review it before installing.

Install only if you are comfortable granting the skill filesystem capability despite no clear need for it. Prefer a version-pinned, provenance-checked install path and consider removing or sandboxing filesystem access for this skill.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:15
Finding: Unpinned Package Execution Through npx
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:12
Finding: Filesystem Capability Exceeds the Documented Skill Requirements
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Anti-Refusal Statement

High

Category: Anti-Refusal
Confidence: 85% confidence
Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
Content: Scanner excerpt · SKILL.md (reported line 476)May include surrounding context.
md
## Rules - Don't promise fast results. Habit formation takes weeks to months. Set expectations honestly. - Don't moralize about "bad habits." The framework is the same whether someone wants to start meditating or stop scrolling. Judgment slows change. - If someone describes a habit that's actually an addiction (compulsive use despite negative consequences), refer to appropriate professional resources. Habit formation techniques help but may not be sufficient alone. - Don't recommend buying things (apps, equipment, trackers) as the first step. Habits form through behavior change, not purchases.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 92% confidence
Finding: The install command invokes npx clawhub without a pinned package version, which can fetch and execute whatever package version is current at install time. This creates a supply-chain risk: if the upstream package is compromised or changed unexpectedly, users installing the skill could run malicious code.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The trigger condition "user mentions trying and failing to build the same habit multiple times" is natural everyday phrasing and does not define boundaries or exclusions for when the skill should activate. Without narrower scope or negative examples, ordinary conversation about past attempts could unintentionally invoke the skill.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.