ClawHub
Back to skill

Security audit

waste-level-today

Security checks across malware telemetry and agentic risk

Overview

This is a text-only humor skill that gives playful self-roast ratings, with the main risk being that broad triggers could tease users who are actually venting or distressed.

Install this only if you want light roast-style humor. Avoid relying on it for serious emotional disclosures, burnout, depression, or self-harm-adjacent venting, because its intended behavior is joking and teasing rather than support.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger conditions are very broad and include common self-deprecating or complaint phrases, which can cause the skill to activate when the user did not explicitly ask for this behavior. That can lead to unintended routing, inappropriate tone selection, or responses that mock users in contexts involving stress, burnout, or mental health concerns.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.