ClawHub

Buddhism

Security checks across malware telemetry and agentic risk

Overview

This is a text-only Buddhism reference skill with clearly visible off-topic personal and project-promotion material, but it does not run code or request access to user data.

Install only if you are comfortable with a Buddhism reference skill that may also answer with Chen Lang contact/profile details and OpenClaw promotional information. Treat the biographical, cultural, and project claims as static text that may need independent verification.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
The skill is presented as a Buddhism information skill, but a large portion of the content pivots into a named individual's profile, contact details, and promotional material for unrelated projects. This creates a scope-integrity problem: the agent may disclose or prioritize irrelevant personal/promotional content when users expected neutral religious/cultural information, enabling unwanted data exposure and covert promotion.

Description-Behavior Mismatch

Medium
Confidence
96% confidence
Finding
The manifest advertises Buddhist culture education, but the later sections substantially redirect the skill toward personal branding and ecosystem promotion. This mismatch is dangerous because it can mislead routing, cause the assistant to surface unrelated marketing content under a trusted educational label, and weaken user consent around what information the skill is meant to provide.

VirusTotal

57/57 vendors flagged this skill as clean.

View on VirusTotal