ClawHub
Back to skill

Security audit

Nb

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only helper for the nb notes CLI, with a real caution around one manual Git workflow but no evidence of hidden or malicious behavior.

Install this only if you use or plan to use nb. Prefer nb CLI commands over manual changes inside ~/.nb, review any configured Git remote before running nb sync, and be careful with force delete, overwrite, and broad Git operations because they can affect private notes and notebook history.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
The skill explicitly warns users not to edit files in ~/.nb by hand, then later provides contradictory instructions that copy files directly into the repository and run manual git/index commands. In a Git-backed note system, bypassing the supported CLI can corrupt metadata, indexing, or repository state and can cause persistent data integrity issues.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
These instructions direct users to copy content into ~/.nb/<notebook>/, run git commands manually, and rebuild the index despite the earlier warning not to modify nb repositories by hand. That inconsistency makes unsafe repository manipulation likely, increasing the chance of broken indexing, inconsistent commits, or accidental damage to notes and notebook history.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.