ClawHub

Relationship Repair Skill

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only relationship guidance skill with visible safety caveats and a visible external promotion, but it does not run code or request access to user data.

Install only if you want relationship-repair conversation guidance. Do not rely on it as a licensed therapist, emergency service, or crisis counselor, and be cautious about sharing highly sensitive relationship details. Review ReplyHer separately before using the linked external service, especially because conversation monitoring or pattern tracking would involve additional privacy considerations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Description-Behavior Mismatch

Low
Confidence
90% confidence
Finding
The skill includes a promotional referral to an external service ('replyher.com') that is outside the core documented function of providing relationship-repair guidance. In a sensitive counseling-style context, this can steer vulnerable users toward an off-platform service without clear vetting, privacy disclosures, or a clear boundary between support and marketing.

Intent-Code Divergence

Low
Confidence
84% confidence
Finding
Labeling the skill as an 'AI Crisis Counselor for Couples' overstates its capability and may cause users to rely on it during high-risk situations as though it were a qualified crisis intervention tool. In a domain involving abuse, suicidality, and violence, misleading framing can delay appropriate professional or emergency help.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal