ClawHub
Back to skill

Security audit

Obsidian Task

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small Obsidian task helper that can edit task files, but its file-changing behavior is visible, purpose-aligned, and user-directed.

Install this only if you intend agents to make user-directed edits to task notes in your Obsidian vault. Review the file and line arguments before approving update or append commands, and keep normal vault backups or sync history available for undo.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill explicitly documents commands that update and append tasks in an Obsidian vault, which changes user files, but it does not warn users that these actions modify persisted data. In an agentic context, omission of a clear mutation warning increases the chance of unintended file edits, especially because the examples encourage direct state-changing operations like toggle, done, todo, and append.

Natural-Language Policy Violations

Low
Confidence
78% confidence
Finding
The documentation includes example task content entirely in Chinese characters, which may imply a fixed language expectation in the skill's interface examples. Because no language choice, opt-in, or locale justification is provided, this can be read as a natural-language locale policy issue.

Static analysis

No suspicious patterns detected.