ClawHub
Back to skill

Security audit

浪漫聊天技巧、撩妹情话、恋爱沟通技能。提供分类的情话套路、开场白、调情话术、日常甜言蜜语、应对策略、幽默段子等，覆盖各种恋爱场景。当用户需要约会建议、与女生聊天、编写浪漫消息、撩妹、情话、恋爱调侃、甜言蜜语或回应浪漫情况时使用。也称为"陆小凤"（Lady's Man）。

Security checks across malware telemetry and agentic risk

Overview

This is a text-only romantic chat advice skill with broad activation wording, but no hidden code, data access, or persistence.

Install only if you want romance or dating-message help. Use it for consensual, appropriate dating contexts, review generated lines before sending, and avoid applying it to workplace, professional, minor, or clearly non-romantic conversations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill description is broad enough to match ordinary conversation requests such as general chatting, romance, or message writing, which can cause the agent to invoke this skill in routine contexts where specialized romantic persuasion guidance was not intended. In practice, that over-triggering can steer benign user interactions into manipulative or sexualized advice, increasing safety and routing errors even though the file also includes some boundary-respecting language.

Vague Triggers

Medium
Confidence
96% confidence
Finding
The quick-start trigger '当用户请求聊天/浪漫/撩妹建议时' is ambiguous because '聊天' is extremely common and not inherently romantic, so the skill may activate for many unrelated conversations. This creates a routing vulnerability where normal assistant tasks can be captured by a persuasion-oriented skill, which is more concerning here because the skill is specifically designed to generate flirtation and pickup lines.

Vague Triggers

Low
Confidence
88% confidence
Finding
The example request '帮我跟她聊天' is too generic and can overlap with harmless everyday requests for message drafting or social advice, making it a plausible false route into this skill. While lower risk than the broader metadata and trigger text, it still contributes to misclassification by reinforcing that ordinary conversation help should be handled by a romance/flirting skill.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.