ClawHub
Back to skill

Security audit

Islamic Guidance Taqwa Companion

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only Islamic spiritual guidance skill with disclosed boundaries and no executable code or hidden access requests.

Install only if you want an Islamic spiritual-advice companion. Treat it as supportive guidance, not a replacement for qualified scholars, formal fatwa bodies, medical care, legal advice, or professional counseling, especially for serious personal or crisis situations.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The usage guidance is too vague: 'Use when the conditions in the description are met' does not provide concrete activation boundaries, prohibited use cases, or escalation rules. In a spiritually advisory skill, ambiguous triggering can cause the agent to invoke the skill in inappropriate contexts, potentially leading to overconfident religious guidance, misuse in sensitive mental-health situations, or responses beyond the skill's intended scope.

Static analysis

No suspicious patterns detected.