Quit Weed

Security checks across malware telemetry and agentic risk

Overview

This is a small instruction-only quitting support skill with no executable code, though it may save sensitive cannabis-use progress locally.

This skill appears safe to install if you want cannabis break or quitting support. Be aware that streaks, goals, and craving notes can reveal sensitive personal information, so only record details you are comfortable storing and check your OpenClaw environment for how to view or delete saved data. If a general emotional-support request accidentally activates this skill, clarify that the request is not cannabis-related.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The craving-support trigger examples are broad, natural-language help phrases like "Help me get through this" and "What should I do about this urge?" that can overlap with unrelated emotional-support or crisis-oriented requests. This can cause the skill to activate in contexts where a user is seeking general mental health help rather than cannabis-specific assistance, creating misrouting risk and potentially unsafe or inadequate guidance.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal