ClawHub
Back to skill

Security audit

Social Coach

Security checks across malware telemetry and agentic risk

Overview

This dating-coach skill is not clearly malicious, but it defaults to storing sensitive relationship and emotional history long-term and may reveal full saved records in error messages.

Install only if you are comfortable with an agent keeping a local dating and emotional-history journal. Use aliases instead of real names, avoid storing screenshots or identifying details, set SOCIAL_COACH_DATA to a private folder if you use it, and manually review/delete the JSONL, profile, and backup files when you no longer need them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Ssd 3

Medium
Confidence
96% confidence
Finding
The skill explicitly instructs the model to surface full user-provided JSON or corrupted line contents back to the user on write failure or parse errors. This creates a natural-language data leakage path: private dating history, emotional state, and identifiers could be echoed into chat logs or exposed in contexts where other records are present or corruption mixes data unexpectedly.

Session Persistence

Medium
Category
Rogue Agent
Content
### 存储路径（环境自适应）

首次使用时，用 Bash 按以下优先级解析出 `$DATA_DIR`，并 `mkdir -p` 创建。**OpenClaw（龙虾）是本 skill 的首要目标平台**，因此检测到龙虾环境时直接锁死老路径，保证数据无缝继承：

```bash
DATA_DIR="${SOCIAL_COACH_DATA:-}"
Confidence
93% confidence
Finding
mkdir -p` 创建。**OpenClaw（龙虾）是本 skill 的首要目标平台**，因此检测到龙虾环境时直接锁死老路径，保证数据无缝继承： ```bash DATA_DIR="${SOCIAL_COACH_DATA:-}" # OpenClaw/龙虾：clawhub 在 PATH 或 ~/.openclaw 已存在 → 强制走老路径 [ -z "$DATA_DIR" ] && comma

Session Persistence

Medium
Category
Rogue Agent
Content
**🤖 模型（步骤化）：**

1. **Bash 解析 `$DATA_DIR`** 并 `mkdir -p`，告诉用户："数据存储在 `~/.social-coach`"
2. **Bash 检查 `profile.json` 不存在** → 标记冷启动，先处理指令，最后追加画像邀请
3. **Bash 算 ID**：`wc -l < $DATA_DIR/invitations.jsonl 2>/dev/null || echo 0` → `0` → 新 ID = `INV-001`
4. **追问缺失字段**（一次性列齐）：
Confidence
88% confidence
Finding
mkdir -p`，告诉用户："数据存储在 `~/.social-coach

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.