Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed BKMRK API integration that can read and modify a user's bookmark library and send submitted content to Claude for analysis.
Install this only if you are comfortable giving an agent your BKMRK API key and letting BKMRK send submitted or synced bookmark content to Claude for analysis. Review before bulk trashing or changing bookmark/project status, and do not submit private pages, confidential transcripts, secrets, or sensitive project metadata unless that sharing is acceptable.
The analysis_persona field is described as text injected into Claude's system prompt, which means untrusted project metadata can directly influence downstream model behavior. This is a prompt-injection pathway that could alter analysis, suppress safeguards, exfiltrate sensitive context from other inputs, or bias scoring and recommendations in unsafe ways.
The skill explicitly states that full extracted content from URLs, transcripts, threads, and articles is sent to Claude for analysis, but it does not require a clear user-facing warning or confirmation at the point of submission. This creates a privacy and data-sharing risk because users may submit sensitive URLs or content without realizing that fetched material and derived text will be transmitted to a third-party AI service.
The skill describes broad, uncapped extraction and routing of bookmark content, transcripts, thread text, and linked URLs to an LLM without defining minimization boundaries or sensitivity checks. This increases the chance that secrets, personal data, proprietary content, or unexpectedly large context are transmitted downstream unnecessarily.
The onboarding flow sends an email address and consent to create an account and return an API key, but the skill text does not require a clear warning that personal data is being transmitted and used for account provisioning. Users may not understand that this action shares identifying information with an external service and results in credential issuance tied to that identity.
No suspicious patterns detected.
