ClawHub

活出自己的答案

Security checks across malware telemetry and agentic risk

Overview

This is a text-only reflective coaching skill with broad life-growth prompts but no code, hidden actions, credential use, or external data access.

Install only if you want a broad journaling and self-reflection framework. Avoid using it as a substitute for crisis support, therapy, legal, medical, or financial advice, and be mindful before sharing highly sensitive personal details.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The skill says it should be automatically invoked for a very broad set of topics like life confusion, relationships, self-exploration, emotions, reflection, and major choices. In practice, this can cause over-triggering in sensitive conversations and route users into a growth-oriented framework even when they may need specialized support, clearer consent, or a narrower tool. The risk is amplified because these are intimate, high-impact domains where misapplied guidance can shape user decisions.

Vague Triggers

Medium
Confidence
94% confidence
Finding
The skill’s activation description is extremely broad, covering common topics like life confusion, relationships, self-exploration, emotions, reflection, and personal growth. This can cause the skill to trigger in many ordinary conversations, diverting users into a prescriptive framework and potentially crowding out more appropriate domain-specific handling such as mental health crisis, legal, or medical routing.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal