ClawHub

Ultimate Problem Solver

Security checks across malware telemetry and agentic risk

Overview

This is a simple problem-solving prompt skill with broad activation wording, but it contains no code, persistence, credential access, or hidden behavior.

Install this if you want a lightweight, direct problem-solving format. Be aware it may activate on broad requests like debugging or general analysis, and non-Chinese users may need to ask their agent to answer in their preferred language.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger phrases are broad and include very common requests such as '怎么办', '帮我解决', '分析一下', and 'solve this', which can cause the skill to activate for a wide range of unrelated user intents. This creates routing confusion and can override more appropriate skills, increasing the chance of incorrect handling, especially for sensitive domains the skill itself only partially excludes.

Natural-Language Policy Violations

Medium
Confidence
87% confidence
Finding
The skill content is written as if Chinese is the required operating language and does not offer language negotiation or state a justified locale restriction. In a multilingual environment, this can lead to user misunderstanding, degraded safety messaging, and incorrect task execution if users receive guidance in a language they did not request or fully understand.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal