ClawHub
Back to skill

Security audit

Decision Helper

Security checks across malware telemetry and agentic risk

Overview

This is a text-only decision framework that may proactively suggest analysis for major choices, but it does not run code, access private data, or take actions for the user.

Install this only if you want your agent to proactively offer structured decision analysis. For financial, legal, medical, career, or relationship decisions, use the framework as a prompt for reflection and confirm important choices with appropriate human or professional judgment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The skill explicitly states it auto-triggers on major life choices and vague 'hesitation signals,' which creates an overly broad activation surface for unsolicited guidance. In a decision-making skill, this is risky because the agent may intervene in sensitive domains like career, investments, or relationships without clear user consent, increasing the chance of inappropriate or overconfident advice.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger criteria rely on ambiguous concepts such as 'involves choosing/trade-offs' and 'impact is relatively large,' which are not operationally precise and can cause false activations. In this skill's context, false positives are more dangerous because it is designed to influence consequential personal decisions, so vague thresholds can lead to unsolicited framing that steers users in sensitive situations.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal