ClawHub

Gaokao Essay Guide

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent Gaokao essay-writing helper with only low-impact routing ambiguity from broad trigger words.

Install if you want Gaokao-focused Chinese essay help. Be aware it may activate for general writing terms unless the host router scopes it carefully, and its generated essays and score predictions should be treated as practice guidance rather than authoritative grading or material to copy directly.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
84% confidence
Finding
The trigger terms are broad generic words such as '作文指导', '审题', '立意', and '范文', which can match ordinary conversation well outside the intended high-school essay scope. Overbroad activation can cause incorrect skill routing, unnecessary file/script access, and instruction hijacking of unrelated user requests, especially because the description says the skill 'must' be used.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The manifest description contains a mandatory activation rule using broad terms without exclusions, increasing the chance that this skill overrides more appropriate skills during normal writing-related conversations. In multi-skill environments, that can degrade routing integrity and make the agent follow this skill's rigid workflow in contexts where it should not, which is a genuine policy/control-plane risk.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal