ClawHub
Back to skill

Security audit

Auto-Astro-psychology-Test（行星心理人格测试）

Security checks across malware telemetry and agentic risk

Overview

This skill is a text-only astrology-style personality report generator that asks for birth details needed for its stated purpose and does not request hidden access or execution authority.

Before using it, be aware that birth date, birth time, and birth city are personal details. Share only what you are comfortable sharing; the skill says birth time can be omitted, though parts of the report may be less accurate. Treat the output as entertainment or self-reflection, not professional psychological or medical advice.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly requests birth date, time, and city, which together constitute sensitive personal data and can uniquely identify or profile a user. The file contains extensive report-generation logic but no privacy notice, minimization guidance, retention limits, or warning that such data may be sensitive, increasing the risk of overcollection and unsafe handling.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.