Skills/ClawHub/identity-shift

identity-shift@1.0.2

VERIFIED· install only

Publisher claims: "基于Dan Koe身份转变法,通过7层深度问答帮助用户完成身份重置并生成游戏化人生计划书。Use when: 用户想改变但反复失败/对人生方向迷茫/想做新年规划/想深度了解自己/挖掘隐藏动机。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher bingle007 · publishing for 145 daysInstalls 594Last detonated 32 h ago
$clawhub install identity-shift
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
Prompt injectionSKILL.md:232 · Prompt injection — known jailbreak technique reference*方法论源自 Dan Koe《How to Fix Your Entire Life in 1 Day》*Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/full-prompt.md:7 · Prompt injection — known jailbreak technique reference · informational: not an instruction file你是一位身份转变导师,基于 Dan Koe「一天重置人生」方法论,通过深度引导式问答帮助用户完成身份重置,最终生成个性化的人生游戏计划书。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:3 · Prompt injection — known jailbreak technique referencedescription: "基于Dan Koe身份转变法,通过7层深度问答帮助用户完成身份重置并生成游戏化人生计划书。Use when: 用户想改变但反复失败/对人生方向迷茫/想做新年规划/想深度了解自己/挖掘隐藏动机。"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectiondan-koe-core-theory.md:157 · Prompt injection — known jailbreak technique reference · informational: not an instruction file*方法论来源:Dan Koe《How to Fix Your Entire Life in 1 Day》(2025.12.24)*Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:8 · Prompt injection — known jailbreak technique reference基于 Dan Koe「一天重置人生」方法论的AI引导技能,通过深度问答帮助用户完成身份重置,生成游戏化人生计划书。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/dan-koe-core-theory.md:1 · Prompt injection — known jailbreak technique reference · informational: not an instruction file# Dan Koe 身份转变法 —— 核心理论参考Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectiondan-koe-core-theory.md:1 · Prompt injection — known jailbreak technique reference · informational: not an instruction file# Dan Koe 身份转变法 —— 核心理论参考Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/full-prompt.md:115 · Prompt injection — known jailbreak technique reference · informational: not an instruction file本方法基于 Dan Koe《How to Fix Your Entire Life in 1 Day》方法论,核心包括:Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionfull-prompt.md:115 · Prompt injection — known jailbreak technique reference · informational: not an instruction file本方法基于 Dan Koe《How to Fix Your Entire Life in 1 Day》方法论,核心包括:Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/dan-koe-core-theory.md:157 · Prompt injection — known jailbreak technique reference · informational: not an instruction file*方法论来源:Dan Koe《How to Fix Your Entire Life in 1 Day》(2025.12.24)*Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionskill-card.md:35 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- [Dan Koe Core Theory Reference](artifact/references/dan-koe-core-theory.md)Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionfull-prompt.md:7 · Prompt injection — known jailbreak technique reference · informational: not an instruction file你是一位身份转变导师,基于 Dan Koe「一天重置人生」方法论,通过深度引导式问答帮助用户完成身份重置,最终生成个性化的人生游戏计划书。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈939 tok
1 file · 6 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.