ClawHub
Back to skill

Security audit

AI Drawing Composition Template

Security checks across malware telemetry and agentic risk

Overview

The skill is non-executable, but it packages reusable minor-character image prompt templates and body/proportion guidance without clear age-safety guardrails.

Review or modify this skill before installing. Replace the under-18 example and body/proportion anchors with adult or age-neutral character templates, and add explicit rules forbidding sexualized, suggestive, or exploitative depictions of minors. Also be careful with any reference-image packs or generation logs because they can preserve sensitive visual material.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Confidence
88% confidence
Finding
The file explicitly templates prompts for generating a 16-year-old character and does so as a reusable, production-ready example rather than as a narrowly justified safety or educational edge case. While the content here is non-explicit, normalizing minor-character generation in a generic image-prompting skill can enable downstream misuse, especially when the skill emphasizes consistency, anchor reuse, and cross-model portability.

Natural-Language Policy Violations

High
Confidence
96% confidence
Finding
The file explicitly defines a character as a '16-year-old girl's figure' with precise body-description guidance for image generation. In a prompt-engineering skill focused on producing consistent character depictions, this creates a meaningful risk of facilitating sexualized or otherwise exploitative depiction of a minor, especially because the template system is designed to preserve and reproduce appearance traits across model families.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.