ClawHub
Back to skill

Security audit

daily-tips-omni

Security checks for vulnerabilities and agentic risk

Overview

The skill is a low-impact daily tips helper that stores small local preference files, with no evidence of hidden data theft or destructive behavior.

This skill is reasonable to install for daily optimization advice. Be aware that it keeps saved and skipped tip preferences in local files under the skill directory, and review the optional Reddit helper before relying on community-feed functionality or scheduled use.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
The script constructs a shell command with interpolated values and executes a sibling skill via `exec`, even though this daily-tips tool otherwise operates on local static data. While the current call path uses hardcoded/substantially constrained inputs, invoking an external script through the shell expands the attack surface: a swapped or malicious `reddit-readonly` script, path edge cases, or future reuse of `fetchReddit` with less-trusted arguments could lead to arbitrary code execution or unintended behavior.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The README states that the skill 'tracks your preferences and improves over time' but provides no explanation of what data is collected, where it is stored, whether it leaves the local system, or how users can disable or delete it. For an agent skill, undocumented preference tracking can create privacy and trust risks because users may unknowingly expose behavioral data or workflow metadata.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The trigger list includes several broad phrases such as "agent optimization," "ai agent tips," and "cron optimization" that can match many unrelated user requests. This can cause unintended activation of the skill, leading users to receive advice from this skill when they expected a different tool or a narrower, more trusted workflow.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill states that it remembers preferences, tracks saved tips, and suppresses skipped topics, but it does not disclose where this data is stored, how long it is retained, or whether users can inspect or delete it. In an agent environment, silent preference tracking can expose behavioral data and create privacy and compliance risks, especially on shared systems.

Static analysis

No suspicious patterns detected.