ClawHub
Back to skill

Security audit

Hersona

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed persona-management helper; its durable persona features are real but aligned with its stated purpose.

Install this only if you want hersona to change the agent's persona behavior. Use single or multi mode for temporary changes, and use persistent mode only when you intentionally want future sessions affected; check backups before using reset or --force.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger description is broad enough to match ordinary conversational requests like 'talk like X' or 'be more polite,' causing the skill to activate in situations where the user may not intend prompt-level persona injection or persistence-capable behavior. Because this skill can alter the system prompt and supports persistent mode, overbroad routing increases the chance of unintended behavior changes across the session or future sessions.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
Persistent mode auto-writes SOUL.md and is intended to affect future sessions, but the warning is buried in mode details rather than surfaced prominently at the point of use. Users may unknowingly make durable changes to profile state, which is risky for any skill that modifies session defaults or long-lived persona configuration.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
Reset mode deletes persistent registrations, but the destructive effect is not emphasized strongly enough where the reset command is introduced. A user could invoke reset expecting a temporary detach and instead remove long-lived persona settings, causing loss of configuration and unexpected behavior changes in later sessions.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.