ClawHub
Back to skill

Security audit

master-help

Security checks across malware telemetry and agentic risk

Overview

This skill is a narrow router that helps users choose an appropriate master skill and does not request sensitive access or make changes.

Install this if you want a navigation helper for choosing among master skills. Be aware it may invoke on some general 'help me choose' wording, but its own instructions limit it to routing and not teaching or handling sensitive data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger description includes broad natural-language phrases such as 'help me choose' and 'which master should I ask', which can match many benign requests that are not actually routing requests. In a meta-skill that decides delegation, overbroad activation can hijack user intent, prevent the correct specialist skill from handling the query, and route sensitive doctrinal or practice questions through an inappropriate intermediate skill.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.