ClawHub
Back to skill

Security audit

discussion-cohesion-diagnosis

Security checks for vulnerabilities and agentic risk

Overview

This is a low-risk academic writing diagnostic skill with no code execution, privileged access, persistence, or hidden data handling.

This skill is reasonable to install if you want diagnostic feedback on Discussion-section cohesion. Be aware that broad phrases like “is my discussion connected” or “narrative flow check” may invoke it, so confirm you intended a cohesion diagnosis rather than a rewrite or a different kind of writing review.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
83% confidence
Finding
The trigger list includes relatively broad natural-language phrases such as "is my discussion connected" and "narrative flow check," which could cause the skill to activate on ordinary user requests that were not meant to invoke this specific diagnostic. While the skill itself is low risk and does not execute code or rewrite content, unintended invocation can still lead to misrouting, confusion, or inappropriate tool selection within a larger agent system.

Static analysis

No suspicious patterns detected.